936 matches found
MiracleLinux 8 : lz4-1.8.3-5.el8_10 (AXSA:2025-10510:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10510:01 advisory. lz4: heap-based buffer overflow in LZ4write32 CVE-2019-17543 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MAL-2026-145 Malicious code in spark-ar-core-libs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1285c72e9b251b778e8914d717f3408a94460a9f9aca70a65945e4c510c5651f The package spark-ar-core-libs was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview spark-ar-core-libs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in spark-ar-core-libs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1285c72e9b251b778e8914d717f3408a94460a9f9aca70a65945e4c510c5651f The package spark-ar-core-libs was found to contain malicious code. Source: ghsa-malware...
[SECURITY] Fedora 43 Update: dr_libs-0^20251201.877b096-1.fc43
Single-file audio decoding libraries for C/C++...
EUVD-2008-5240
Malware in sbrugna...
EUVD-2023-38203
Malicious code in bioql PyPI...
Malware in @corp-ais/mychannel-shared-libs
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47111 Malicious code in @corp-ais/mychannel-shared-libs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f0e8cfbe80a4f93fca6e505e8d783eb28bae0448cb594f0affede6c773532f Any computer that has this package installed or running should be considered...
appRain CMF cross-site scripting vulnerability (CNVD-2025-21115)
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input in the /apprain/developer/addons/update/baselibs endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...
CVE-2025-41050
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/baselibs...
CVE-2025-41050 Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/baselibs...
appRain CMF Cross-Site Script Vulnerability
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input in the /apprain/developer/addons/update/baselibs endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...
org.webjars.npm:crypto-browserify (>=3.2.6, <=3.2.8), org.webjars.npm:node-libs-browser (>=0.5.2, <=0.5.3) +1 more potentially affected by CVE-2025-9288 via org.webjars.npm:sha.js (>=2.2.6, <=2.3.6)
org.webjars.npm:sha.js MAVEN version =2.2.6, =3.2.6, =0.5.2, =0.5.3 - org.webjars.npm:shasum 1.0.1 Source cves: CVE-2025-9288 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-12089401...
MAL-2025-12219 Malicious code in @zalastax/nolb-lion-libs (npm)
The package @zalastax/nolb-lion-libs was found to contain malicious code...
Malicious code in linux-libs (npm)
The package linux-libs was found to contain malicious code...
Malicious code in dds-ddw_spa_libs_primeng (npm)
The package dds-ddwspalibsprimeng was found to contain malicious code...
Malicious code in @zalastax/nolb-lion-libs (npm)
The package @zalastax/nolb-lion-libs was found to contain malicious code...