2927 matches found
EUVD-2026-3132
A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknown functionality of the file /src/chkuser.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried...
FeMiner WMS SQL injection vulnerability
FeMiner wms is a repository management system developed by FeMiner’s individual developers in China. FeMiner wms has a SQL injection vulnerability, which stems from incorrect handling of the parameter “Username” in the file /src/chkuser.php. This vulnerability may lead to SQL injection attacks...
CVE-2016-10979
The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS...
CVE-2016-10978
The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF...
React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors
React2Shell continues to witness heavy exploitation, with threat actors leveraging the maximum-severity security flaw in React Server Components RSC to deliver cryptocurrency miners and an array of previously undocumented malware families, according to new findings from Huntress. This includes a...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
CVE-2025-63602
A vulnerability exists in Awesome Miner versions through 11.2.4 due to the implementation of an insecure version of the WinRing0 driver (version 1.2.0.5, renamed as IntelliBreeze.Maintenance.Service.sys ). The driver lacks a properly secured DACL , which allows unprivileged users to interact with...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
CVE-2025-63602: Buffer Over-read
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
EUVD-2025-198044
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
Awesome Miner security vulnerabilities
Awesome Miner is a cryptocurrency mining management software from the Awesome Miner organization. A security vulnerability exists in Awesome Miner version 11.2.4 and earlier, which stems from an improper implementation of the WinRing0 driver and could lead to local elevation of privilege and...
Malicious Package
Overview zcash-easy-miner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-41739
Malicious code in zcash-easy-miner npm...
MAL-2025-50732 Malicious code in zcash-easy-miner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47755c29c024cf295a8deba084ae4ecd371b00b9e828f92a588fa5855595351 The package zcash-easy-miner was found to contain malicious code. Source: ghsa-malware 961be38007c4d39afa3574fcfb0b541985648d133866ab95f54133187aa42e...
Malicious code in zcash-easy-miner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47755c29c024cf295a8deba084ae4ecd371b00b9e828f92a588fa5855595351 The package zcash-easy-miner was found to contain malicious code. Source: ghsa-malware 961be38007c4d39afa3574fcfb0b541985648d133866ab95f54133187aa42e...