Lucene search
+L

13509 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/28 7:49 p.m.11 views

Malicious code in cryptozip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 157ea6b1f1c3d4ed5564c494db770e9156f3e269f12cefec6e4270085a762f26 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.3AI score
SaveExploits0References4
OSV
OSV
added 2025/12/28 7:49 p.m.12 views

MAL-2025-192956 Malicious code in cryptozip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 157ea6b1f1c3d4ed5564c494db770e9156f3e269f12cefec6e4270085a762f26 During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.2AI score
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/28 12:30 a.m.7 views

SUSE CVE-2025-14177

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

3.7CVSS6.2AI score0.00482EPSS
SaveExploits3References12
Packet Storm News
Packet Storm News
added 2025/12/28 12:0 a.m.11 views

EquaCode: A Multi-Strategy Jailbreak Approach for Large Language Models Via Equation Solving and Code Completion

Large language models LLMs, such as ChatGPT, have achieved remarkable success across a wide range of fields. However, their trustworthiness remains a significant concern, as they are still susceptible to jailbreak attacks aimed at eliciting inappropriate or harmful responses. However, existing...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/12/27 8:15 p.m.13 views

AZL-73195 CVE-2025-14177 affecting package php for versions less than 8.3.29-1

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

7.5CVSS7.3AI score0.00482EPSS
SaveExploits3References1
NVD
NVD
added 2025/12/27 8:15 p.m.6 views

CVE-2025-14177

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

7.5CVSS0.00482EPSS
SaveExploits3References1
OSV
OSV
added 2025/12/27 8:15 p.m.11 views

AZL-73240 CVE-2025-14177 affecting package php for versions less than 8.1.34-1

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

7.5CVSS6AI score0.00482EPSS
SaveExploits3References1
OSV
OSV
added 2025/12/27 8:15 p.m.7 views

UBUNTU-CVE-2025-14177

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

7.5CVSS7.3AI score0.00482EPSS
SaveExploits3References5
Vulnrichment
Vulnrichment
added 2025/12/27 7:33 p.m.7 views

CVE-2025-14177 Information Leak of Memory in getimagesize

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

6.3CVSS5.7AI score0.00482EPSS
SaveExploits3References1
AlpineLinux
AlpineLinux
added 2025/12/27 7:33 p.m.8 views

CVE-2025-14177

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

7.5CVSS6.2AI score0.00482EPSS
SaveExploits3
EUVD
EUVD
added 2025/12/27 7:33 p.m.5 views

EUVD-2025-205484

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

6.3CVSS6AI score0.00482EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2025/12/27 7:33 p.m.30 views

CVE-2025-14177 Information Leak of Memory in getimagesize

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

6.3CVSS0.00482EPSS
SaveExploits3References1
CVE
CVE
added 2025/12/27 7:33 p.m.130 views

CVE-2025-14177

Summary: CVE-2025-14177 affects PHP’s getimagesize() when reading multi-chunk images (e.g., via php://filter). Root cause is in php_read_stream_all_chunks() which overwrites the buffer without advancing the pointer, leaking uninitialized heap data and potentially exposing confidential information...

7.5CVSS6.1AI score0.00482EPSS
SaveExploits3References1Affected Software1
OSV
OSV
added 2025/12/27 7:33 p.m.6 views

CVE-2025-14177 Information Leak of Memory in getimagesize

In PHP versions:8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, the getimagesize function may leak uninitialized heap memory into the APPn segments e.g., APP1 when reading images in multi-chunk mode such as via php://filter. This occurs due to a...

6.3CVSS6.6AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/12/27 2:18 p.m.213 views

Exploit for Cross-site Scripting in Exclusiveaddons Exclusive_Addons_For_Elementor

PoCSmith AI-Powered Proof-of-Concept Generator for Security...

6.4CVSS6.9AI score0.01593EPSS
SaveExploits12
OSV
OSV
added 2025/12/27 9:41 a.m.7 views

MAL-2025-192948 Malicious code in extrazip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.2AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/27 9:41 a.m.15 views

Malicious code in extrazip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f58777710463b043a0724ad1d7999807501b56667a10eced314fd036e9303fdf During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

7.3AI score
SaveExploits0References4
GithubExploit
GithubExploit
added 2025/12/27 5:26 a.m.265 views

Exploit for Insufficient Type Distinction in Rarlab Winrar

CVE Exploit Finder Author: Your Name/Handle Focus: Automated V...

7.8CVSS7.1AI score0.97811EPSS
SaveExploits49
CNNVD
CNNVD
added 2025/12/27 12:0 a.m.5 views

PHP 安全漏洞

PHP is a scripting language executed server-side by PHP Open Source. A security vulnerability exists in PHP versions prior to 8.1.34, 8.2.30, 8.3.29, 8.4.16, and 8.5.1, which stems from the getimagesize function in multi-block mode that may leak uninitialized heap memory, potentially leading to...

7.5CVSS6AI score0.00482EPSS
SaveExploits3References3
GithubExploit
GithubExploit
added 2025/12/26 11:42 a.m.212 views

blacksmith

BlacksmithAI OPEN-SOURCE AI-Powered Penetration Testing F...

7.8AI score
SaveExploits0
Rows per page
Query Builder