1443 matches found
EUVD-2021-7347
Malicious code in bioql PyPI...
EUVD-2023-30286
Malicious code in bioql PyPI...
EUVD-2025-24562
Malicious code in bioql PyPI...
EUVD-2024-30451
Malicious code in bioql PyPI...
EUVD-2022-7257
Malicious code in bioql PyPI...
EUVD-2024-33420
Malicious code in bioql PyPI...
EUVD-2021-34049
Malicious code in bioql PyPI...
EUVD-2023-36137
Malicious code in bioql PyPI...
EUVD-2025-8265
Malicious code in bioql PyPI...
EUVD-2022-45039
Malicious code in bioql PyPI...
EUVD-2025-4812
Malicious code in bioql PyPI...
EUVD-2024-0073
Malicious code in bioql PyPI...
ALPINE-CVE-2025-10148
curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious server to induce traffic between the two...
AZL-67290 CVE-2025-10148 affecting package cmake for versions less than 3.30.3-10
curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious server to induce traffic between the two...
CVE-2025-10148
curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious server to induce traffic between the two...
curl 安全漏洞
curl is cURL open source a tool for transferring data from or to the server . There is a security vulnerability in curl that can be exploited by attackers that may cause malicious server-induced traffic to be mistaken for real HTTP traffic by proxy servers, thereby polluting their caches...
SUSE CVE-2025-10148
curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious server to induce traffic between the two...
predictable WebSocket mask
curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious server to induce traffic between the two...
CVE-2025-58062
LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer. Prior to version 0.1.12, when users on a Windows platform connect to an attacker controlled MCP server, attackers could provision a malicious authorization server endpoint to silently achieve an OS command injection attack in th...
openmcp-client 操作系统命令注入漏洞
openmcp-client is a versatile vscode plugin from the individual developer Kirigaya Kazuto. An OS command injection vulnerability exists in versions prior to openmcp-client 0.1.12, which stems from the fact that connecting to a malicious MCP server on a Windows platform may result in OS command...