8970 matches found
PT-2025-36993
Name of the Vulnerable Software and Affected Versions: rAthena versions prior to commit 0cc348b Description: rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. A missing bound check in the chclif parse moveCharSlot function can lead to...
CVE-2025-10096 SimStudioAI sim route.ts server-side request forgery
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
CVE-2025-10096 SimStudioAI sim route.ts server-side request forgery
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
CVE-2025-10096: Server-Side Request Forgery (SSRF)
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
The vulnerability of the cJSON_ParseWithLength function allows attackers to access confidential information.
The vulnerability of the cJSONParseWithLength function in the cJSON parser is related to reading data beyond the memory bounds. Exploiting this vulnerability could allow an attacker to access confidential information...
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
...
Linux Distros Unpatched Vulnerability : CVE-2025-38728
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in...
Malicious code in cygnus-dotenv-parse-variables-pm2-sequelize (npm)
The package cygnus-dotenv-parse-variables-pm2-sequelize was found to contain malicious code...
Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm)
The package dotenv-parse-variables-mira-nova-ophiuchus was found to contain malicious code...
Malicious code in dotenv-parse-variables-cluster-mongoose-xanthus (npm)
The package dotenv-parse-variables-cluster-mongoose-xanthus was found to contain malicious code...
Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)
The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...
Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)
The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code...
Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm)
The package dotenv-parse-variables-typeorm-spectron-fusion was found to contain malicious code...
Malicious code in equinox-rate-limiter-auriga-dotenv-parse-variables (npm)
The package equinox-rate-limiter-auriga-dotenv-parse-variables was found to contain malicious code...
Malicious code in gravitationalwave-corvus-dotenv-parse-variables-xo (npm)
The package gravitationalwave-corvus-dotenv-parse-variables-xo was found to contain malicious code...
Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm)
The package kuiperbelt-miranda-dotenv-parse-variables-radiant was found to contain malicious code...
Malicious code in meteor-dotenv-parse-variables-callback-kaus (npm)
The package meteor-dotenv-parse-variables-callback-kaus was found to contain malicious code...
Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)
The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...