EUVD-2025-52768

Malicious code in petite-fuchsia-sheep npm...

EUVD-2025-52763

Malicious code in petite-tomato-firefly npm...

EUVD-2025-52764

Malicious code in petite-magenta-pinniped npm...

EUVD-2025-52771

Malicious code in petite-aqua-mosquito npm...

EUVD-2025-52769

Malicious code in petite-fuchsia-bonobo npm...

EUVD-2025-52766

Malicious code in petite-lavender-turkey npm...

MAL-2025-69879 Malicious code in petite-brown-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489124b3ab739f0f4ad0e53c13314ac926c811bdff59741a522da9abeabfcf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2008-3205

Malware in sbrugna...

EUVD-2015-2329

Malware in sbrugna...

EUVD-2008-2707

Malware in sbrugna...

petite-vue-i18n (9.2.0-alpha.7), vue-i18n (9.2.0-alpha.7) potentially affected by CVE-2025-53892 via @intlify/vue-i18n-core (9.2.0-alpha.7)

@intlify/vue-i18n-core NPM version 9.2.0-alpha.7 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/vue-i18n-core and may be impacted: - petite-vue-i18n 9.2.0-alpha.7 - vue-i18n 9.2.0-alpha.7 Source cves: CVE-2025-53892 Source advisory:...

petite-vue-i18n (9.2.0-alpha.7), vue-i18n (9.2.0-alpha.7) potentially affected by CVE-2025-27597 via @intlify/vue-i18n-core (9.2.0-alpha.7)

@intlify/vue-i18n-core NPM version 9.2.0-alpha.7 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/vue-i18n-core and may be impacted: - petite-vue-i18n 9.2.0-alpha.7 - vue-i18n 9.2.0-alpha.7 Source cves: CVE-2025-27597 Source advisory:...

petite-france.com Improper Access Control vulnerability OBB-3808381

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

petite-herbe.fr Cross Site Scripting vulnerability OBB-3499581

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2008-0318

Integer overflow in the cliscanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow...

SUSE CVE-2008-2713

libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read...

SUSE CVE-2008-3215

libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713...

SUSE CVE-2015-1463

ClamAV before 0.98.6 allows remote attackers to cause a denial of service crash via a crafted petite packer file, related to an "incorrect compiler optimization."...

SUSE CVE-2015-2222

ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...

Memory Corruption Vulnerability in PEtite Shell

PEtite is a shelling tool that runs on the win32 platform and has some usage. The tool has multiple memory corruption vulnerabilities in the handling of pe files, allowing attackers to exploit the vulnerability to construct malformed pe files that can lead to program crashes. If successfully...