728 matches found
MiracleLinux 8 : cups-filters-1.20.0-29.el8.2 (AXSA:2023-6177:04)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6177:04 advisory. cups-filters: remote code execution in cups-filters, beh CUPS backend CVE-2023-24805 Tenable has extracted the preceding description block directly from the...
MAL-2026-259 Malicious code in @riag-libs/pattern-library-react-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64366b918bd4380cf8b087a445df7d86ef18b21686c577a9ed7bdd523aceac64 The package @riag-libs/pattern-library-react-hooks was found to contain malicious code. Source: ghsa-malware...
MiracleLinux 8 : lz4-1.8.3-5.el8_10 (AXSA:2025-10510:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10510:01 advisory. lz4: heap-based buffer overflow in LZ4write32 CVE-2019-17543 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 9 : sqlite-3.34.1-8.el9_6 (AXSA:2025-10658:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10658:01 advisory. sqlite: Integer Truncation in SQLite CVE-2025-6965 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory...
Malicious code in spark-ar-core-libs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1285c72e9b251b778e8914d717f3408a94460a9f9aca70a65945e4c510c5651f The package spark-ar-core-libs was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview spark-ar-core-libs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-145 Malicious code in spark-ar-core-libs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1285c72e9b251b778e8914d717f3408a94460a9f9aca70a65945e4c510c5651f The package spark-ar-core-libs was found to contain malicious code. Source: ghsa-malware...
[SECURITY] Fedora 43 Update: dr_libs-0^20251201.877b096-1.fc43
Single-file audio decoding libraries for C/C++...
EUVD-2008-5240
Malware in sbrugna...
EUVD-2023-38203
Malicious code in bioql PyPI...
MAL-2025-47111 Malicious code in @corp-ais/mychannel-shared-libs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f0e8cfbe80a4f93fca6e505e8d783eb28bae0448cb594f0affede6c773532f Any computer that has this package installed or running should be considered...
appRain CMF cross-site scripting vulnerability (CNVD-2025-21115)
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input in the /apprain/developer/addons/update/baselibs endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...
CVE-2025-41050
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/baselibs...
CVE-2025-41050 Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/baselibs...
appRain CMF 跨站脚本漏洞
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input in the /apprain/developer/addons/update/baselibs endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...
Malicious code in linux-libs (npm)
The package linux-libs was found to contain malicious code...
Malicious code in dds-ddw_spa_libs_primeng (npm)
The package dds-ddwspalibsprimeng was found to contain malicious code...
MAL-2025-12219 Malicious code in @zalastax/nolb-lion-libs (npm)
The package @zalastax/nolb-lion-libs was found to contain malicious code...