Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next...

Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks

New research has uncovered that publishers of over 100 Visual Studio Code VS Code extensions leaked access tokens that could be exploited by bad actors to update the extensions, posing a critical software supply chain risk. "A leaked VS Code Marketplace or Open VSX PAT personal access token allow...

EUVD-2018-11258

Malware in sbrugna...

EUVD-2017-9974

Malware in sbrugna...

EUVD-2020-0075

Malware in sbrugna...

EUVD-2025-4201

Malicious code in bioql PyPI...

EUVD-2022-24740

Malicious code in bioql PyPI...

EUVD-2024-49587

Malicious code in bioql PyPI...

EUVD-2024-32572

Malicious code in bioql PyPI...

EUVD-2025-2071

Malicious code in bioql PyPI...

EUVD-2023-1492

Malicious code in bioql PyPI...

EUVD-2023-54186

Malicious code in bioql PyPI...

EUVD-2024-50814

Malicious code in bioql PyPI...

EUVD-2025-0198

Malicious code in bioql PyPI...

EUVD-2024-26086

Malicious code in bioql PyPI...

EUVD-2024-33317

Malicious code in bioql PyPI...

EUVD-2022-7767

Malicious code in bioql PyPI...

EUVD-2025-20874

Malicious code in bioql PyPI...

Mozilla: User Can Delete Other Users' Personal Access Tokens at /delete-token/{token_id}/ on Mozilla Pontoon

A vulnerability was discovered in the Mozilla Pontoon application that allowed users to delete other users' personal access tokens at the /delete-token/tokenid/ endpoint without proper permission checks. The vulnerability was caused by the absence of user permission verification in the deletetoke...

Linux Distros Unpatched Vulnerability : CVE-2024-8114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an...