Malicious code in @zalastax/nolb-express-l (npm)

The package @zalastax/nolb-express-l was found to contain malicious code...

MAL-2025-11660 Malicious code in @zalastax/nolb-google-l (npm)

The package @zalastax/nolb-google-l was found to contain malicious code...

MAL-2025-12540 Malicious code in @zalastax/nolb-ngx-l (npm)

The package @zalastax/nolb-ngx-l was found to contain malicious code...

MAL-2025-12166 Malicious code in @zalastax/nolb-lion-l (npm)

The package @zalastax/nolb-lion-l was found to contain malicious code...

MAL-2025-11760 Malicious code in @zalastax/nolb-graphql-l (npm)

The package @zalastax/nolb-graphql-l was found to contain malicious code...

MAL-2025-11821 Malicious code in @zalastax/nolb-gulp-l (npm)

The package @zalastax/nolb-gulp-l was found to contain malicious code...

MAL-2025-13056 Malicious code in @zalastax/nolb-passport-l (npm)

The package @zalastax/nolb-passport-l was found to contain malicious code...

MAL-2025-11935 Malicious code in @zalastax/nolb-hapi-l (npm)

The package @zalastax/nolb-hapi-l was found to contain malicious code...

MAL-2025-11374 Malicious code in @zalastax/nolb-express-l (npm)

The package @zalastax/nolb-express-l was found to contain malicious code...

MAL-2025-12176 Malicious code in @zalastax/nolb-lion-lib-l (npm)

The package @zalastax/nolb-lion-lib-l was found to contain malicious code...

MAL-2025-11328 Malicious code in @zalastax/nolb-eslint-plugin-l (npm)

The package @zalastax/nolb-eslint-plugin-l was found to contain malicious code...

MAL-2025-12737 Malicious code in @zalastax/nolb-nodebb-plugin-l (npm)

The package @zalastax/nolb-nodebb-plugin-l was found to contain malicious code...

ocfs2: validate l_tree_depth to avoid out-of-bounds access

...

CVE-2024-48659

An issue in DCME-320-L =9.3.2.114 allows a remote attacker to execute arbitrary code via the loguumount.php component...

CVE-2023-27641

The REPORT after z but before a parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL...

CVE-2023-21122

In various functions of various files, there is a possible way to bypass the DISALLOWDEBUGGINGFEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-21131

In checkKeyIntentParceledCorrectly of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error in the code. This could lead to local escalation of privilege and the ability to launch arbitrary activities in settings with no additional execution...

CVE-2023-21137

In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Androi...

CVE-2023-21123

In multiple functions of multiple files, there is a possible way to bypass the DISALLOWDEBUGGINGFEATURES restriction for tracing due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-21108

In sdpubuilduuidseq of sdpdiscovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...