8078 matches found
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via org.Bouncycastle.Crypto.Fips.NativeLoader. An attacker can cause excessive resource allocation by deploying hybrid modules in multi-JVM environments, potentially leading to resour...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via org.Bouncycastle.Crypto.Fips.NativeLoader. An attacker can cause excessive resource allocation by deploying hybrid modules in multi-JVM environments, potentially leading to resour...
CVE-2025-9092 Hybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castl...
CVE-2025-9092
CVE-2025-9092 is an Uncontrolled Resource Consumption issue affecting Bouncy Castle for Java – BC-FJA 2.1.0 bc-fips (API modules), with the vulnerable component identified as org.Bouncycastle.Crypto.Fips.NativeLoader. Public sources (NVD/IBM bulletin) confirm the affected delivery from BC-FJA 2.1...
PT-2025-33545 · Unknown · Bouncy Castle For Java - Bc-Fja
Name of the Vulnerable Software and Affected Versions: Bouncy Castle for Java - BC-FJA versions 2.1.0 through 2.1.0 Description: An uncontrolled resource consumption issue exists in Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips API modules that allows excessive allocation. The issue is associated...
Bouncy Castle Java security vulnerability
Bouncy Castle Java is a cryptographic algorithm program open-sourced by Legion of the Bouncy Castle Inc. A security vulnerability exists in Bouncy Castle Java version 2.1.0, which stems from a resource over-allocation issue in the org.Bouncycastle.Crypto.Fips.NativeLoader file...
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
A Chinese-speaking advanced persistent threat APT actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The activity has been attributed by Cisco Talo...
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
A Chinese-speaking advanced persistent threat APT actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The activity has been attributed by Cisco Talo...
UAT-7237 targets Taiwanese web hosting infrastructure
Cisco Talos discovered UAT-7237, a Chinese-speaking advanced persistent threat APT group active since at least 2022, which has significant overlaps with UAT-5918. UAT-7237 conducted a recent intrusion targeting web infrastructure entities within Taiwan and relies heavily on the use of open-source...
Malicious code in loglevel-whitedwarf-postcss-loader-betelgeuse (npm)
The package loglevel-whitedwarf-postcss-loader-betelgeuse was found to contain malicious code...
Malicious code in sociobiology-exoplanetology-less-loader-sagitta (npm)
The package sociobiology-exoplanetology-less-loader-sagitta was found to contain malicious code...
Malicious code in carina-google-radiant-less-loader (npm)
The package carina-google-radiant-less-loader was found to contain malicious code...
Malicious code in cordelia-sass-loader-ignite-graphql (npm)
The package cordelia-sass-loader-ignite-graphql was found to contain malicious code...
Malicious code in altair-helios-start-sass-loader (npm)
The package altair-helios-start-sass-loader was found to contain malicious code...
Malicious code in cs-config-loader (npm)
The package cs-config-loader was found to contain malicious code...
Malicious code in postcss-loader-graphql-tachyon-cors (npm)
The package postcss-loader-graphql-tachyon-cors was found to contain malicious code...
Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)
The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...
Malicious code in algol-sagitta-sass-loader-jovian (npm)
The package algol-sagitta-sass-loader-jovian was found to contain malicious code...