876 matches found
EUVD-2022-15983
Malicious code in bioql PyPI...
EUVD-2023-59104
Malicious code in bioql PyPI...
EUVD-2021-30056
Malicious code in bioql PyPI...
EUVD-2023-31198
Malicious code in bioql PyPI...
EUVD-2023-32665
Malicious code in bioql PyPI...
EUVD-2024-27596
Malicious code in bioql PyPI...
Pointer leaks through pointer-keyed data structures
Posted by Jann Horn, Google Project Zero Introduction Some time in 2024, during a Project Zero team discussion, we were talking about how remote ASLR leaks would be helpful or necessary for exploiting some types of memory corruption bugs, specifically in the context of Apple devices. Coming from...
PT-2025-39316
Name of the Vulnerable Software and Affected Versions min-document versions prior to 2.19.0 Description A flaw exists in the 'min-document' package due to improper handling of namespace operations within the removeAttributeNS function. An attacker can exploit this by manipulating the prototype...
SUSE CVE-2023-53440
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current nilfs2 sysfs support has issues with the timing of creation and deletion of sysfs entries, potentially leading to null pointer dereferences, use-after-free, and lockdep warnings...
CVE-2025-9573
The nsbackup extension through 13.0.2 for TYPO3 allows command injection...
Command Injection
Overview nitsan/ns-backup is an extension for TYPO3 that lets you save your code, files, and database with just a few clicks. Install Backup Plus and connect it to your cloud storage like Google Drive, Dropbox, Amazon S3, SFTP, Rsync, etc.. Affected versions of this package are vulnerable to...
CVE-2025-9573
The nsbackup extension through 13.0.2 for TYPO3 allows command injection...
CVE-2025-9573
The CVE-2025-9573 entry concerns TYPO3 ns_backup (ns-backup) extension versions up to 13.0.2, where a command injection flaw exists in the generateBackup function. The root cause is improper handling of input that leads to arbitrary command execution when an administrator uses the extension’s bac...
CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup)
The nsbackup extension through 13.0.2 for TYPO3 allows command injection...
PT-2025-35539
Name of the Vulnerable Software and Affected Versions: alaneuler batteryKid versions 2.0 through 2.1 Description: A weakness has been identified in alaneuler batteryKid on macOS. The affected element is an unknown function within the file PrivilegeHelper/PrivilegeHelper.swift of the NSXPCListener...
Linux Distros Unpatched Vulnerability : CVE-2025-32743
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This...
Linux Distros Unpatched Vulnerability : CVE-2018-1054
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote,...
MAL-2025-27865 Malicious code in ns-sha3 (npm)
The package ns-sha3 was found to contain malicious code...
