1540 matches found
Malicious Package
Overview goji-js-org is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
X.Org Server present_create_notifies Use-After-Free Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...
CVE-2025-12269
A vulnerability was found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The affected element is an unknown function of the file /dash/org/settings/previews of the component Account Setting Page. The manipulation results in cross site scripting. It is possible to launch the attack...
LearnHouse 安全漏洞
LearnHouse is an online learning management system open-sourced by LearnHouse. LearnHouse has a security vulnerability that originates from a cross-site scripting vulnerability in an unknown function in file /dash/org/settings/previews...
EUVD-2025-35942
Malicious code in faustjs-org-sitemm2 npm...
MAL-2025-48604 Malicious code in faustjs-org-sitemm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd5170a7cd8c6057c679a57454447d33c3c699d911bb06b70386d4d67244ef1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35149
Malicious code in @jd-org/clear-server npm...
CVE-2025-54539
creationtimestamp| type| source ---|---|--- 2025-10-15 20:25:14+00:00| seen| https://seclists.org/oss-sec/2025/q4/47 2025-10-16 09:38:22+00:00| seen| https://gist.github.com/Darkcrai86/21d924515240ab1a8da787a76c37edc5 2025-10-16 10:42:12+00:00| seen|...
BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver
Summary Due to unsafe URL handling, bbot's gitclone.py can be made to leak a user's github.com API key to an attacker-controlled webserver. Impact A user who has placed their github.com API key in the configuration for any of the following modules: githubcodesearch githubworkflows gitlab gitclone...
GHSA-63WH-P5FX-H4VC BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver
Summary Due to unsafe URL handling, bbot's gitclone.py can be made to leak a user's github.com API key to an attacker-controlled webserver. Impact A user who has placed their github.com API key in the configuration for any of the following modules: githubcodesearch githubworkflows gitlab gitclone...
EUVD-2001-0272
Malware in sbrugna...
EUVD-2016-8796
Malware in sbrugna...
EUVD-2018-4927
Malware in sbrugna...
EUVD-2015-6456
Malware in sbrugna...
EUVD-2011-4480
Malware in sbrugna...
EUVD-2018-11897
Malware in sbrugna...
PT-2025-41166
Name of the Vulnerable Software and Affected Versions Dependency-Track versions prior to 4.13.5 Description Dependency-Track is a component analysis platform used for managing software supply chain risk. Versions prior to 4.13.5 may inadvertently transmit credentials intended for a private NuGet...
EUVD-2023-33975
Malicious code in bioql PyPI...