9174 matches found
CVE-2025-10096: Server-Side Request Forgery (SSRF)
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
cJSON Parse Heap Buffer Overflow Info Disclosure
The vulnerability of the cJSONParseWithLength function in the cJSON parser is related to reading data beyond the memory bounds. Exploiting this vulnerability could allow an attacker to access confidential information...
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
...
Linux Distros Unpatched Vulnerability : CVE-2025-38728
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in...
Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm)
The package dotenv-parse-variables-typeorm-spectron-fusion was found to contain malicious code...
Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)
The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...
Malicious code in gravitationalwave-corvus-dotenv-parse-variables-xo (npm)
The package gravitationalwave-corvus-dotenv-parse-variables-xo was found to contain malicious code...
Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm)
The package dotenv-parse-variables-mira-nova-ophiuchus was found to contain malicious code...
MAL-2025-44056 Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm)
The package dotenv-parse-variables-typeorm-spectron-fusion was found to contain malicious code...
Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)
The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code...
Malicious code in equinox-rate-limiter-auriga-dotenv-parse-variables (npm)
The package equinox-rate-limiter-auriga-dotenv-parse-variables was found to contain malicious code...
Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)
The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...
Malicious code in meteor-dotenv-parse-variables-callback-kaus (npm)
The package meteor-dotenv-parse-variables-callback-kaus was found to contain malicious code...
Malicious code in dotenv-parse-variables-norma-andromeda-testcafe (npm)
The package dotenv-parse-variables-norma-andromeda-testcafe was found to contain malicious code...
Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm)
The package kuiperbelt-miranda-dotenv-parse-variables-radiant was found to contain malicious code...
MAL-2025-46151 Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)
The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...
MAL-2025-44929 Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm)
The package kuiperbelt-miranda-dotenv-parse-variables-radiant was found to contain malicious code...
MAL-2025-44053 Malicious code in dotenv-parse-variables-norma-andromeda-testcafe (npm)
The package dotenv-parse-variables-norma-andromeda-testcafe was found to contain malicious code...