8883 matches found
CVE-2025-58407 GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...
MAL-2025-190512 Malicious code in bcryptkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a480449fe3e91f066e60e8f4ed7d4c85e6915b3c9b2712769c54eac67eefa452 The package bcryptkit was found to contain malicious code. Source: ghsa-malware fabc375d7ac31af2156e2d4ecf33d4e87df80d7b95873af883a10d9c35dfabb9 Any...
Malicious code in vite-chunk-master (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa857f9f07f371efc55f392a0fcf81beea9480a42476b38fe80cf496b37ba8d The package vite-chunk-master was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-117182
Malicious code in outside-blue-narwhal npm...
Malicious code in outside_camel_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2057e34411ec21385a884c5816152e4bb75db3b18a40d010a1d4f19236cd28ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89556
Malicious code in outsideswiftz3n npm...
EUVD-2025-89557
Malicious code in outsidespoonbillz3n npm...
EUVD-2025-89559
Malicious code in outsidecattlez3n npm...
MAL-2025-116325 Malicious code in outside_cattle_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a055913c8255eaba46c052a1a4f11c0a25113d921927a306717d75cc811a36b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c
It was discovered that zziplib is vulnerable to a directory traversal flaw in most of its unzip binaries, including unzip-mem, unzzipcat-mem, unzzipcat-big, unzzipcat-mix, and unzzipcat-zip. An attacker may use this flaw to write files outside the intended target directory, overwriting existing...
EUVD-2025-78654
Malicious code in outsidemitez3n npm...
EUVD-2025-81011
Malicious code in outsideaardvark0xrequest npm...
EUVD-2025-81010
Malicious code in outsidebeaver0xrequest npm...
EUVD-2025-71433
Malicious code in outsidehornetz3n npm...
EUVD-2025-62744
Malicious code in outsideboarz3n npm...
EUVD-2025-67914
Malicious code in outsiderhinocerosz3n npm...
EUVD-2025-52863
Malicious code in outside-indigo-bonobo npm...
EUVD-2025-52864
Malicious code in outside-blush-haddock npm...
MAL-2025-66546 Malicious code in npmtest_chenguang (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f702a0658de936fc3084652027ce0383b048954aef2f39b5783af8edb2e8c7de The package npmtestchenguang was found to contain malicious code. Source: ghsa-malware c6f729e82fdac96b8daaca470b095362e03a02d531c217553f57ffb104cd93...