EUVD-2022-6587

Malicious code in bioql PyPI...

EUVD-2024-3587

Malicious code in bioql PyPI...

EUVD-2025-10958

Malicious code in bioql PyPI...

EUVD-2023-1437

Malicious code in bioql PyPI...

EUVD-2025-6566

Malicious code in bioql PyPI...

EUVD-2022-54978

Malicious code in bioql PyPI...

CVE-2025-59746: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'm' parameter in '/lib/asp/alert.asp'...

CVE-2025-57275: Buffer Copy without Checking Size of Input

Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...

Malware in vusd-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47865 Malicious code in wide-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73134e4d528333c8306a8966d02b2302f48a8375f08bfb7529fbc30bbf2b196 Any computer that has this package installed or running should be considered...

Malicious code in wide-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73134e4d528333c8306a8966d02b2302f48a8375f08bfb7529fbc30bbf2b196 Any computer that has this package installed or running should be considered...

CVE-2025-26278

A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Malware in @gc-crm/gc-crm-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2025-39378

Name of the Vulnerable Software and Affected Versions dref version 0.1.2 Description A prototype pollution issue exists in the lib.set function. This allows attackers to potentially cause a Denial of Service DoS by providing a specially crafted payload. The issue involves manipulating the prototy...

CVE-2025-26278

A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2025-26278

The dref (NPM) package, specifically version v0.1.2 , is vulnerable to Prototype Pollution in its lib.set function. An attacker can provide a crafted payload to inject malicious properties into the Object.prototype, which are then inherited by all JavaScript objects. This can result in a Denial o...

Malicious code in paypal-postman-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b733a611e3d27e56f4c6ee549bbcf3d88a1c823512c13797440c4c13f2712c The package's index.js imports os, fs, and https at the top level and read...

MAL-2025-47594 Malicious code in paypal-postman-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b733a611e3d27e56f4c6ee549bbcf3d88a1c823512c13797440c4c13f2712c The package's index.js imports os, fs, and https at the top level and read...

CVE-2025-57204: Improper Neutralization of Input During Web Page Generation

Stocky POS with Inventory Management & HRM ui-lib version 5.0 is affected by a Stored Cross-Site Scripting XSS vulnerability within the Products module available to authenticated users. The vulnerability resides in the product name parameter submitted to the product-creation endpoint via a standa...

CVE-2025-55904

Open5GS v2.7.5, prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615, is vulnerable to a NULL pointer dereference when a multipart/related HTTP POST request with an empty HTTP body is sent to the SBI of either AMF, AUSF, BSF, NRF, NSSF, PCF, SMF, UDM, or UDR, resulting in a denial of service...