10857 matches found
Updated flatpak & bubblewrap packages fix security vulnerability
Flatpak may allow access to files outside sandbox for certain apps. CVE-2024-42472...
PT-2025-47568
Name of the Vulnerable Software and Affected Versions Email Security appliance affected versions not specified Description A Path Traversal issue exists in the Email Security appliance. This allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences, suc...
MAL-2025-190556 Malicious code in 1libxmljs2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabdd956b939ba7ecadbced1795cced1214b25b2faf5920d3dd1f80374b42390 The package 1libxmljs2 was found to contain malicious code. Source: ghsa-malware f356ae30a62d4d1611f89041412c4c86aadd5c438b5809c1d4ee201ee814ea26 Any...
Malicious code in node-calculator-36ae (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51dc4c4001b55763ab48a478aec316bdcd431278c7123df65befe745b23e6d1b The package node-calculator-36ae was found to contain malicious code. Source: ghsa-malware...
CVE-2025-58407 GPU DDK - TOCTOU bug affecting psFWMemContext->uiPageCatBaseRegSet
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...
MAL-2025-190512 Malicious code in bcryptkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a480449fe3e91f066e60e8f4ed7d4c85e6915b3c9b2712769c54eac67eefa452 The package bcryptkit was found to contain malicious code. Source: ghsa-malware fabc375d7ac31af2156e2d4ecf33d4e87df80d7b95873af883a10d9c35dfabb9 Any...
Malicious code in vite-chunk-master (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa857f9f07f371efc55f392a0fcf81beea9480a42476b38fe80cf496b37ba8d The package vite-chunk-master was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-117182
Malicious code in outside-blue-narwhal npm...
Malicious code in outside_camel_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2057e34411ec21385a884c5816152e4bb75db3b18a40d010a1d4f19236cd28ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89559
Malicious code in outsidecattlez3n npm...
EUVD-2025-89557
Malicious code in outsidespoonbillz3n npm...
MAL-2025-116325 Malicious code in outside_cattle_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a055913c8255eaba46c052a1a4f11c0a25113d921927a306717d75cc811a36b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89556
Malicious code in outsideswiftz3n npm...
zziplib: ZZIPlib: Arbitrary file overwrite via directory traversal
It was discovered that zziplib is vulnerable to a directory traversal flaw in most of its unzip binaries, including unzip-mem, unzzipcat-mem, unzzipcat-big, unzzipcat-mix, and unzzipcat-zip. An attacker may use this flaw to write files outside the intended target directory, overwriting existing...
EUVD-2025-78654
Malicious code in outsidemitez3n npm...
EUVD-2025-81010
Malicious code in outsidebeaver0xrequest npm...
EUVD-2025-81011
Malicious code in outsideaardvark0xrequest npm...
EUVD-2025-71433
Malicious code in outsidehornetz3n npm...