EUVD-2024-19588

Malicious code in bioql PyPI...

EUVD-2022-5624

Malicious code in bioql PyPI...

CryptOracle: A Modular Framework to Characterize Fully Homomorphic Encryption

Privacy-preserving machine learning has become an important long-term pursuit in this era of artificial intelligence AI. Fully Homomorphic Encryption FHE is a uniquely promising solution, offering provable privacy and security guarantees. Unfortunately, computational cost is impeding its mass...

Bolt before 3.3.6 does not properly restrict access to _profiler routes

...

PT-2026-3235

Apache bRPC and Affected Versions Apache bRPC versions prior to 1.15.0 Description Apache bRPC contains a remote command injection flaw in the heap profiler built-in service. The /pprof/heap endpoint does not properly validate the extra options parameter, allowing attackers to execute arbitrary...

CVE-2025-10597

CVE-2025-10597 affects kidaze CourseSelectionSystem: SQL injection via cname in /Profilers/PriProfile/COUNT2.php. Remote attack possible; vulnerable for versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464 (per connected PT-2025-38221). Recommendations include sanitizing the cname parameter...

Linux Distros Unpatched Vulnerability : CVE-2024-35231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to...

The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 123.

...

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 126.

...

Malicious code in g-profiler (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41571 Malicious code in g-profiler (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in statsd-jvm-profiler-dash (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1641c5f88ba5a2747c3768eb890f4e8ec38765b0e706615a116369a1b27e86f8 The OpenSSF Package Analysis project identified...

MAL-2025-6958 Malicious code in statsd-jvm-profiler-dash (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1641c5f88ba5a2747c3768eb890f4e8ec38765b0e706615a116369a1b27e86f8 The OpenSSF Package Analysis project identified...

MAL-2025-31823 Malicious code in react-native-performance-lists-profiler (npm)

The package react-native-performance-lists-profiler was found to contain malicious code...

Malicious code in react-native-performance-lists-profiler (npm)

The package react-native-performance-lists-profiler was found to contain malicious code...

MAL-2025-14667 Malicious code in app_profiler (npm)

The package appprofiler was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-1556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only...

Linux Distros Unpatched Vulnerability : CVE-2024-4775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior...

WordPress Profiler-What Slowing Down Your WP Missing Authorization Vulnerability

WordPress Profiler-What Slowing Down Your WP is a plugin for checking the speed of your website, mainly used to analyze the impact of plugins on the loading speed of your website. WordPress Profiler-What Slowing Down Your WP suffers from a missing authorization vulnerability that can be exploited...

Malicious code in firefox-profiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4487e2a5882ebb5a6d35e69c7f4644df4cebad9ed4660d01cdcbd6d137dd82c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...