Malicious code in ciayo-logic (npm)

The package ciayo-logic was found to contain malicious code...

MAL-2025-36689 Malicious code in test-mlw2-zones-logic (npm)

The package test-mlw2-zones-logic was found to contain malicious code...

MAL-2025-17991 Malicious code in data-logic (npm)

The package data-logic was found to contain malicious code...

Malicious code in hivemed-logic (npm)

The package hivemed-logic was found to contain malicious code...

Malicious code in @malware-test-lefte-logic-whins-kangs/test-mlw3-lefte-logic-whins-kangs (npm)

The package @malware-test-lefte-logic-whins-kangs/test-mlw3-lefte-logic-whins-kangs was found to contain malicious code...

Malicious code in data-logic (npm)

The package data-logic was found to contain malicious code...

MAL-2025-17015 Malicious code in ciayo-logic (npm)

The package ciayo-logic was found to contain malicious code...

MAL-2025-22459 Malicious code in hivemed-logic (npm)

The package hivemed-logic was found to contain malicious code...

MirGuard: Towards a Robust Provenance-Based Intrusion Detection System against Graph Manipulation Attacks

Learning-based Provenance-based Intrusion Detection Systems PIDSes have become essential tools for anomaly detection in host systems due to their ability to capture rich contextual and structural information, as well as their potential to detect unknown attacks. However, recent studies have shown...

CVE-2025-50861

The CVE-2025-50861 entry affects the Lotus Cars Android App (com.lotus.carsdomestic.intl) version 1.2.8, where the exported component PushDeepLinkActivity is accessible without authentication via ADB or malicious apps. This could allow unintended access to application internals and may lead to de...

Altus Cars Lotus Cars Android app 安全漏洞

Altus Cars Lotus Cars Android app is a mobile app from Altus Cars UK that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which originates from unauthenticated access to a component and could lead to a...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

CLSA-2025-1755003990 libvpx: Fix of CVE-2024-5197

CVE-2024-5197: fix integer overflows in image allocation and wrapping logic, validate dimensions and alignment to prevent invalid buffer calculations...

GHSA-JHMR-57CJ-Q6G9 Komari vulnerable to 2FA Authentication Bypass

Summary Logic error in 2FA verification condition allows bypass of two-factor authentication Details https://github.com/komari-monitor/komari/blob/bd5a6934e1b79a12cf1e6a9bba5372d0e04f3abc/api/login.goL55 There is no way for Verify2Fa to return an error AND true as ok at the same time, any codes a...

Komari vulnerable to 2FA Authentication Bypass

Summary Logic error in 2FA verification condition allows bypass of two-factor authentication Details https://github.com/komari-monitor/komari/blob/bd5a6934e1b79a12cf1e6a9bba5372d0e04f3abc/api/login.goL55 There is no way for Verify2Fa to return an error AND true as ok at the same time, any codes a...

The vulnerability of the web interface of the information system for state and municipal payments in the Republic of Tatarstan (GIS GMPl) stems from errors in the logic of the web application’s operation. This vulnerability allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the information system for state and municipal payments in the Republic of Tatarstan GIS GMPl is related to errors in the logic of the web application’s operation. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthoriz...

CVE-2025-54793

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...

Logic Flaw Vulnerability in Founder's All-Media News Gathering and Editing System of Beijing Beifang Founder Electronics Co.

Beijing Beifang Founder Electronics Co., Ltd. covers the fields of printing, font, media publishing and big data, providing inkjet printing equipment, digital publishing technology and media convergence solutions. A logic flaw vulnerability exists in Beijing Beifang Founder Electronics Co., Ltd.'...

Logic Error

Apache HTTP Server is vulnerable to a logic error. The vulnerability is due to a flaw in the evaluation of RewriteCond expr directives, which causes all expressions to be treated as true, allowing an attacker to bypass intended rewrite conditions and access or redirect resources unexpectedly...

Linux Distros Unpatched Vulnerability : CVE-2021-46940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in index converting The idxtooffset functio...