Lucene search
+L

5504 matches found

OSV
OSV
added 2026/01/06 4:45 a.m.8 views

MAL-2026-71 Malicious code in redis-request-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98c3985913e00b5e728a27ab47c68589ba0e478f576fa6ed9aed1c42d229972 The package redis-request-parser was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/06 4:45 a.m.16 views

Malicious code in redis-request-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98c3985913e00b5e728a27ab47c68589ba0e478f576fa6ed9aed1c42d229972 The package redis-request-parser was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
EUVD
EUVD
added 2026/01/06 4:45 a.m.9 views

EUVD-2026-1128

Malicious code in redis-request-parser npm...

6.6AI score
SaveExploits0
Snyk
Snyk
added 2026/01/06 2:34 a.m.11 views

Malicious Package

Overview redis-cookie-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
EUVD
EUVD
added 2026/01/06 2:34 a.m.5 views

EUVD-2026-1133

Malicious code in redis-cookie-js npm...

6.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/06 2:34 a.m.11 views

Malicious code in redis-cookie-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c702113d5f2bf54eeb40b14947991242428d0d3fe07c09560ea2c10d953975f The package redis-cookie-js was found to contain malicious code. Source: ghsa-malware b7f1f65a70f0f5ed9257e64aa9d820766513adeb5a13fc8ac7ae11b9cf58d57...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2026/01/06 2:34 a.m.6 views

MAL-2026-66 Malicious code in redis-cookie-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c702113d5f2bf54eeb40b14947991242428d0d3fe07c09560ea2c10d953975f The package redis-cookie-js was found to contain malicious code. Source: ghsa-malware b7f1f65a70f0f5ed9257e64aa9d820766513adeb5a13fc8ac7ae11b9cf58d57...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/06 2:34 a.m.13 views

Malicious code in redis-cookie-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91375f4f82c5d4299e69cf91489e82b06358bccaa40ec51ab1c19c3e03e3e99a The package redis-cookie-parser was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
EUVD
EUVD
added 2026/01/06 2:34 a.m.11 views

EUVD-2026-1132

Malicious code in redis-cookie-parser npm...

6.6AI score
SaveExploits0References1
Snyk
Snyk
added 2026/01/06 2:34 a.m.6 views

Malicious Package

Overview redis-cookie-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSV
OSV
added 2026/01/06 2:34 a.m.10 views

MAL-2026-67 Malicious code in redis-cookie-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91375f4f82c5d4299e69cf91489e82b06358bccaa40ec51ab1c19c3e03e3e99a The package redis-cookie-parser was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/01/06 12:00 a.m.8 views

The vulnerability of the Go-based Redis database library go-redis, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the go-redis library for working with Redis databases is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

3.7CVSS6.2AI score0.00724EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/12/30 5:05 p.m.6 views

OPENSUSE-SU-2025:20121-1 Security update for redis

This update for redis fixes the following issues: - Updated to 8.2.3 boo1252996 CVE-2025-62507 https://github.com/redis/redis/releases/tag/8.2.3 - Security fixes - CVE-2025-62507 Bug in XACKDEL may lead to stack overflow and potential RCE - Bug fixes - HGETEX: A missing numfields argument when...

9.9CVSS6.6AI score0.82294EPSS
SaveExploits16References7
OSV
OSV
added 2025/12/30 11:09 a.m.11 views

OESA-2025-2862 redis6 security update

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

7.5CVSS8.1AI score0.03935EPSS
SaveExploits5References7
RedhatCVE
RedhatCVE
added 2025/12/30 4:58 a.m.24 views

CVE-2025-15172

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit ha...

5.4CVSS5.6AI score0.00233EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/12/29 4:32 a.m.54 views

CVE-2025-15172 SohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit ha...

5.1CVSS0.00233EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/29 4:32 a.m.30 views

CVE-2025-15172

The CVE-2025-15172 entry concerns SohuTV CacheCloud

5.4CVSS5.5AI score0.00233EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/29 4:32 a.m.6 views

CVE-2025-15172 SohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit ha...

5.1CVSS3.6AI score0.00233EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.10 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function preview in file...

5.4CVSS4.8AI score0.00233EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.9 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which originates from a misuse of the function redirectNoPower in the file src/main/java/com/sohu/cache/web/controller/WebResourceController.java...

5.4CVSS4.7AI score0.00233EPSS
SaveExploits1References5
Rows per page
Query Builder