Malicious code in @zalastax/nolb-pk (npm)

The package @zalastax/nolb-pk was found to contain malicious code...

MAL-2025-11011 Malicious code in @zalastax/nolb-cordova-pk (npm)

The package @zalastax/nolb-cordova-pk was found to contain malicious code...

Malicious code in @zalastax/nolb-react-pk (npm)

The package @zalastax/nolb-react-pk was found to contain malicious code...

MAL-2025-13198 Malicious code in @zalastax/nolb-pk (npm)

The package @zalastax/nolb-pk was found to contain malicious code...

The vulnerabilities of the functions mbedtls_pem_read_buffer() and mbedtls_pk_parse() in the Mbed TLS software allow a attacker to cause a service failure or disclose protected information.

The vulnerability of the mbedtlspemreadbuffer and mbedtlspkparse functions in Mbed TLS is related to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service failures or expose protected information...

Malicious code in telegram-pk-auto-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0440cb1173d59d4994a01cb91522080aef6f9ce7987bcf54f32ebf0ae8a3581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5961 Malicious code in telegram-pk-auto-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0440cb1173d59d4994a01cb91522080aef6f9ce7987bcf54f32ebf0ae8a3581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-52497

Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtlspemreadbuffer and two mbedtlspkparse functions, via untrusted PEM input...

Linux Distros Unpatched Vulnerability : CVE-2012-4510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or...

CVE-2024-8105

A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key PK. An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affected systems and potentially bypassing...

CVE-2024-8105

CVE-2024-8105 describes PKfail, a vulnerability where a compromised private Platform Key (PK) can sign malicious UEFI modules, allowing code execution at boot and potential bypass of Secure Boot. Public documents confirm the root cause is insecure PK usage in UEFI signatures, enabling attackers t...

OPENSUSE-SU-2024:10212-1 cups-pk-helper-0.2.6-1.5 on GA media

These are all security issues fixed in the cups-pk-helper-0.2.6-1.5 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : cups-pk-helper (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cups-pk-helper: Insecure wrapping of cupsGetFile and cupsPutFile methods CVE-2012-4510 Note that Nessus has not...

CVE-2024-34416

Unrestricted Upload of File with Dangerous Type vulnerability in Pk Favicon Manager.This issue affects Pk Favicon Manager: from n/a through 2.1...

CVE-2024-34416 WordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Pk Favicon Manager.This issue affects Pk Favicon Manager: from n/a through 2.1...

CVE-2024-34416 WordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Pk Favicon Manager.This issue affects Pk Favicon Manager: from n/a through 2.1...

CVE-2024-34416

CVE-2024-34416 is an Unrestricted Upload of File with Dangerous Type vulnerability in the Pk Favicon Manager WordPress plugin (up to version 2.1). The issue enables uploading of dangerous files via the plugin, which, per the CVSS-derived metrics, could impact confidentiality, integrity, and avail...

WordPress Pk Favicon Manager plugin <= 2.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Roby Firnando Yusuf in WordPress Plugin Pk Favicon Manager versions = 2.1...

pk-cakovec.hr Improper Access Control vulnerability OBB-3835463

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

reading.pklibrary.com Cross Site Scripting vulnerability OBB-3821046

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...