1535 matches found
CVE-2022-42040
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...
MAL-2025-4198 Malicious code in t43est-hello-user-test-npm-com-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4173 Malicious code in gatsby-theme-newrelic (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4155 Malicious code in @motortrend/sonic-api (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4150 Malicious code in @dailyapy-rn/rn-push-provisioning (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @character-tech/client-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4145 Malicious code in @bmwfedev/playwright-helpers (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pythonbinance (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4217 Malicious code in el1t3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
[ASA-202505-12] go: directory traversal
Arch Linux Security Advisory ASA-202505-12 ========================================== Severity: Low Date : 2025-05-19 CVE-ID : CVE-2025-22873 Package : go Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-2878 Summary ======= The package go before version 2:1.24.3-1...
Debian: Security Advisory (DLA-4169-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1493)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in coloramapkgsdow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2c07b8b1a8058a35f094f6baa72e55bca26bfb3b8bbbde78689ddf0373f698cc Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...
python311-mechanize-0.4.10-1.4 on GA media (moderate)
python311-mechanize-0.4.10-1.4 on GA media Announcement ID: openSUSE-SU-2025:15098-1 Rating: moderate Cross-References: CVE-2021-32837 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
GHSA-FF77-26X5-69CR vulnerabilities
Vulnerabilities for packages: camunda-zeebe, thingsboard...
MAL-2025-3831 Malicious code in helvetia-base-patterns (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682a1cff47d9425b9d7c8d820704387f078a2f5ee4dadc955da09c859c23579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Alibaba Cloud Linux 3 : 0153: texlive (ALINUX3-SA-2023:0153)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0153 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-32700: LuaTeX before 1.17.0 allows executi...
Debian: Security Advisory (DLA-4162-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
