9110 matches found
New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit
Cybersecurity researchers have discovered a new ransomware strain dubbed HybridPetya that resembles the notorious Petya/NotPetya malware, while also incorporating the ability to bypass the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems using a now-patched vulnerabilit...
Advisory ROSA-SA-2025-2988
software: salt 3006.3 WASP: ROSA-CHROME unaffected versions = salt-3006.3-2 affected versions salt-3006.3-2 CVE-ID: CVE-2024-38824 BDU-ID: None CVE-Crit: CRITICAL CVE-DESC.: A directory traversal vulnerability in recvfile allows an attacker to write arbitrary files to the master cache directory...
Improper Handling of Unexpected Data Type
Overview Affected versions of this package are vulnerable to Improper Handling of Unexpected Data Type when functions including List and SignWithFlags process successAgentMsg. This can be triggered by a malicious agent sending a single 0x06 byte SSHAGENTSUCCESS, which is unmarshalled into a...
Allocation of Resources Without Limits or Throttling
Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the data: URL handler. An attacker can trigger a denial of service by crafting a data: URL with a...
Allocation of Resources Without Limits or Throttling
Overview org.webjars.bower:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the data: URL handler. An attacker can trigger a denial of service by crafting a data: URL with...
EulerOS 2.0 SP12 : shim (EulerOS-SA-2025-2027)
According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in ...
Linux Distros Unpatched Vulnerability : CVE-2024-38824
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory. CVE-2024-38824 Note that Nessus relies ...
EulerOS 2.0 SP10 : shim (EulerOS-SA-2025-2086)
According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in...
Linux Distros Unpatched Vulnerability : CVE-2017-8296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kedpm 0.5 and 1.0 creates a history file in /.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written ther...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure in the authentication process. An attacker can obtain sensitive internal error information by submitting a login attempt with a deleted client secret. Remediation A fix was pushed into the master branch but not yet...
Missing Release of Memory after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the key exchange process. An attacker can cause gradual memory exhaustion and potential application crashes by repeatedly initiating key exchanges with incorrect guesses as an...
Arbitrary Code Injection
Overview simstudio is a Sim Studio CLI - Run Sim Studio with a single command Affected versions of this package are vulnerable to Arbitrary Code Injection via the route.ts function. An attacker can execute arbitrary code by supplying crafted input to the code argument. Remediation A fix was pushe...
Salt Configuration Management Authentication Bypass
The vulnerability of the configuration management system and remote execution of Salt operations is related to the lack of token verification in Salt master methods. Exploiting this vulnerability allows a malicious actor to bypass the authentication process...
CVE-2025-49401
Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects smart SEO: from n/a through = 4.0...
CVE-2025-49401
Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects smart SEO: from n/a through = 4.0...
Malicious code in how-to-get-free-coin-master-spins-april-2023-djzdk (npm)
The package how-to-get-free-coin-master-spins-april-2023-djzdk was found to contain malicious code...
Malicious code in coin-master-free-spins-april-2023-fjdk (npm)
The package coin-master-free-spins-april-2023-fjdk was found to contain malicious code...
Malicious code in free-spins-coin-master-2023-dzldz (npm)
The package free-spins-coin-master-2023-dzldz was found to contain malicious code...