8138 matches found
CVE-2025-10051: Unrestricted Upload of File with Dangerous Type
The Demo Import Kit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.1.0 via the import functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload...
RHEL 8 : .NET 8.0 (RHSA-2025:18148)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:18148 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime...
EUVD-2025-34458
Parse Javascript SDK vulnerable to prototype pollution in Parse.Object and internal APIs...
EUVD-2025-34075
CommandKit has incorrect command name exposure in context object for message command aliases...
Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : DPDK vulnerability (USN-7816-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7816-1 advisory. It was discovered that DPDK incorrectly handled the mlx5 Ethernet poll mode driver. An attacker could possibly use this issue to obtain...
USN-7816-1 dpdk vulnerability
It was discovered that DPDK incorrectly handled the mlx5 Ethernet poll mode driver. An attacker could possibly use this issue to obtain sensitive information, or cause the network interface to crash, resulting in a denial of service...
Malware in @my-pvz/ui-kit
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview @my-pvz/ui-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2020-21737
Malware in sbrugna...
EUVD-2020-30418
Malware in sbrugna...
EUVD-2008-6931
Malware in sbrugna...
EUVD-2008-6199
Malware in sbrugna...
EUVD-2020-28601
Malware in sbrugna...
EUVD-2006-6017
Malware in sbrugna...
EUVD-2009-1104
Malware in sbrugna...
EUVD-2001-0401
Malware in sbrugna...
EUVD-2003-1146
Malware in sbrugna...