1858 matches found
Malicious code in working-ark-survival-primal-pass-generator (npm)
The package working-ark-survival-primal-pass-generator was found to contain malicious code...
Malicious code in @zalastax/nolb-pass (npm)
The package @zalastax/nolb-pass was found to contain malicious code...
MAL-2025-23254 Malicious code in instantly-ark-survival-primal-pass-generator (npm)
The package instantly-ark-survival-primal-pass-generator was found to contain malicious code...
MAL-2025-13043 Malicious code in @zalastax/nolb-pass (npm)
The package @zalastax/nolb-pass was found to contain malicious code...
Malicious code in file-alb-um-zip-new-mp3-none-shall-pass-9w6ra-hddlmn (npm)
The package file-alb-um-zip-new-mp3-none-shall-pass-9w6ra-hddlmn was found to contain malicious code...
Malicious code in pass-culture-pro (npm)
The package pass-culture-pro was found to contain malicious code...
MAL-2025-28895 Malicious code in pass-culture-pro (npm)
The package pass-culture-pro was found to contain malicious code...
MAL-2025-39453 Malicious code in working-ark-survival-primal-pass-generator (npm)
The package working-ark-survival-primal-pass-generator was found to contain malicious code...
ROS-20250812-02
The Liblouis translator vulnerability is due to a bounds error inside the compilePassOpcode function in the compileTranslationTable.c. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system Liblouis translator vulnerability is related to a boundar...
Cross-Site Scripting (XSS)
github.com/techarohq/anubis is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of the ?redir= parameter in the /.within.website/x/cmd/anubis/api/pass-challenge route, which allows an attacker to craft malicious pass-challenge pages that execute arbitrary...
The vulnerability of the generate_pass_from_mac function in D-Link DCS-6517 and DCS-7517 microprogrammed camera software allows a intruder to compromise the confidentiality of the protected information.
The vulnerability of the generatepassfrommac function in D-Link DCS-6517 and DCS-7517 microprogrammed camera software is related to insufficient entropy. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality of the protected information...
CVE-2013-10042
A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of...
CVE-2013-10042
A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of...
CVE-2013-10042 freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow
A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of...
CVE-2013-10042
CVE-2013-10042 affects freeFTPd
freeFTPd 安全漏洞
freeFTPd is an open source FTP File Transfer Protocol server by freeFTPd. A security vulnerability exists in freeFTPd 1.0.10 and earlier versions, which stems from improper boundary checking when handling FTP PASS commands, and could lead to memory corruption and arbitrary code execution...
PT-2025-31539 · Undefined · Undefined
A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of...
CVE-2025-54414 Anubis accepts crafted redirect URLs in pass-challenge 'Try Again' buttons
Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to protect upstream resources from scraper bots. In versions 1.21.2 and below, attackers can craft malicious pass-challenge pages that cause a user to execute arbitrary JavaScript...
CVE-2025-54414
CVE-2025-54414 affects TecharoHQ Anubis Web AI Firewall Utility (versions 1.21.2 and earlier). The vulnerability arises from malicious pass-challenge pages that can cause a user to execute arbitrary JavaScript or trigger nonstandard URL schemes via the PassChallenge flow, specifically the route /...
Apartment Visitors Management System pass-details.php file cross-site scripting vulnerability
Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter visname in the file...