875 matches found
CVE-2025-59420
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib’s JWS verification accepts tokens that declare unknown critical header parameters crit, violating RFC 7515 “must‑understand” semantics. An attacker can craft a signed token with a critical...
Linux Distros Unpatched Vulnerability : CVE-2020-10087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing mixed content warnings as well as leaking the IP address of the...
Mozilla Firefox for iOS和Mozilla Firefox Focus for iOS 安全漏洞
Mozilla Firefox for iOS and Mozilla Firefox Focus for iOS are both products of the Mozilla Foundation in the U.S. Mozilla Firefox for iOS is a web browser designed for iOS devices. Mozilla Firefox Focus for iOS is a privacy browser designed for iOS devices. A security vulnerability exists in...
Linux Distros Unpatched Vulnerability : CVE-2025-4674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in...
Linux Distros Unpatched Vulnerability : CVE-2024-10461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In multipart/x-mixed-replace responses, Content-Disposition: attachment in the response header was not respected and did not force a download, which could allow...
Malicious code in com.microsoft.mixedreality.wlt.asa (npm)
The package com.microsoft.mixedreality.wlt.asa was found to contain malicious code...
Malicious code in com.microsoft.mixedreality.movingplatform (npm)
The package com.microsoft.mixedreality.movingplatform was found to contain malicious code...
Malicious code in com.microsoft.mixedreality.powerthermalnotification (npm)
The package com.microsoft.mixedreality.powerthermalnotification was found to contain malicious code...
Malicious code in com.microsoft.mixedreality.toolkit.standardassets (npm)
The package com.microsoft.mixedreality.toolkit.standardassets was found to contain malicious code...
Malicious code in com.microsoft.mixedreality.wlt.asa.samples (npm)
The package com.microsoft.mixedreality.wlt.asa.samples was found to contain malicious code...
MAL-2025-17330 Malicious code in com.microsoft.mixedreality.openxr (npm)
The package com.microsoft.mixedreality.openxr was found to contain malicious code...
Malicious code in com.microsoft.mixedreality.toolkit.extensions (npm)
The package com.microsoft.mixedreality.toolkit.extensions was found to contain malicious code...
Malicious code in com.microsoft.mixedreality.sceneunderstanding (npm)
The package com.microsoft.mixedreality.sceneunderstanding was found to contain malicious code...
Malicious code in com.microsoft.mixedreality.webrtc.samples (npm)
The package com.microsoft.mixedreality.webrtc.samples was found to contain malicious code...
Malicious code in com.microsoft.mixedreality.webrtc (npm)
The package com.microsoft.mixedreality.webrtc was found to contain malicious code...
MAL-2025-17339 Malicious code in com.microsoft.mixedreality.toolkit.standardassets (npm)
The package com.microsoft.mixedreality.toolkit.standardassets was found to contain malicious code...
MAL-2025-17336 Malicious code in com.microsoft.mixedreality.toolkit.gpustats (npm)
The package com.microsoft.mixedreality.toolkit.gpustats was found to contain malicious code...
MAL-2025-17341 Malicious code in com.microsoft.mixedreality.webrtc (npm)
The package com.microsoft.mixedreality.webrtc was found to contain malicious code...