866 matches found
Malicious code in mixed_sparrow_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53ba118b247d8e9cdc91f89340a97f30a9771f38e85ce99fc78b124e373d518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-46340
Malicious code in mixedbonoboz3n npm...
JLSEC-2025-70 A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors...
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest...
EUVD-2018-4101
Malware in sbrugna...
EUVD-2018-11284
Malware in sbrugna...
EUVD-2018-4377
Malware in sbrugna...
EUVD-2016-3889
Malware in sbrugna...
EUVD-2009-0832
Malware in sbrugna...
EUVD-2020-2552
Malware in sbrugna...
EUVD-2006-1228
Malware in sbrugna...
EUVD-2018-12697
Malware in sbrugna...
EUVD-2018-13032
Malware in sbrugna...
EUVD-2018-16939
Malware in sbrugna...
EUVD-2015-7129
Malware in sbrugna...
EUVD-2021-24943
Malware in sbrugna...
EUVD-2017-16810
Malware in sbrugna...
EUVD-2015-4503
Malware in sbrugna...
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...