7861 matches found
MAL-2025-28881 Malicious code in parse-tree-array-function-decode (npm)
The package parse-tree-array-function-decode was found to contain malicious code...
MAL-2025-15236 Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)
The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...
MAL-2025-26218 Malicious code in meta-link-load-earth-parse (npm)
The package meta-link-load-earth-parse was found to contain malicious code...
MAL-2025-28882 Malicious code in parse-unix-minify-balance-route (npm)
The package parse-unix-minify-balance-route was found to contain malicious code...
MAL-2025-18664 Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)
The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...
MAL-2025-18662 Malicious code in dotenv-parse-variables-neutrino-spinner-higgs (npm)
The package dotenv-parse-variables-neutrino-spinner-higgs was found to contain malicious code...
Malicious code in clipboard-parse (npm)
The package clipboard-parse was found to contain malicious code...
Malicious code in @zalastax/nolb-parse (npm)
The package @zalastax/nolb-parse was found to contain malicious code...
Malicious code in @zalastax/nolb-parse- (npm)
The package @zalastax/nolb-parse- was found to contain malicious code...
Malicious code in wind-pipe-double-parse-static (npm)
The package wind-pipe-double-parse-static was found to contain malicious code...
Malicious code in graviton-dactyl-helmet-dotenv-parse-variables (npm)
The package graviton-dactyl-helmet-dotenv-parse-variables was found to contain malicious code...
MAL-2025-28878 Malicious code in parse-safari-reading-list (npm)
The package parse-safari-reading-list was found to contain malicious code...
MAL-2025-23275 Malicious code in interferometry-bootes-gridsome-dotenv-parse-variables (npm)
The package interferometry-bootes-gridsome-dotenv-parse-variables was found to contain malicious code...
OliveTin OS Command Injection vulnerability
OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...
CVE-2025-50946
OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go...
CVE-2025-8846
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parseline of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...
CVE-2025-8844
A vulnerability was determined in NASM Netwide Assember 2.17rc0. This vulnerability affects the function parsesmacrotemplate of the file preproc.c. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...
Malicious File Parsing
@finos/git-proxy is vulnerable to malicious file parsing. The vulnerability is due to improper PACK signature detection in parsePush.ts, which allows an attacker to embed misleading signatures in commit content and craft packet structures to bypass approval or hide commits...
OSV-2025-622 Heap-buffer-overflow in cc_storage_append
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437855564 Crash type: Heap-buffer-overflow READ 1 Crash state: ccstorageappend ParseSEICallback HxxxParseSEI...
