48 matches found
MAL-2025-135453 Malicious code in maman-mieayam76-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2aa81af2e080bcbeb05a1d7cb4ca5ac912e5e543ddb69821f5bbcb86f68f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nurul-keripik45-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1769e1a0d884e99b4535c4f1478e45e7732a3234fa3f722b3ac7f6d662ab726e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nurul-tempe86-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a96fcbda9d108e550307cf4e9913cb942bd4d6e868be3e29651564dec56ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2017-9569
Malware in sbrugna...
EUVD-2018-13475
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-25702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10...
CVE-2017-18453
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure
GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...
SUSE CVE-2024-46701
In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...
DEBIAN-CVE-2024-46701
In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...
AZL-49318 CVE-2024-46701 affecting package kernel 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...
The vulnerability of the Did_set_langmap() function in the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the Didsetlangmap function in the Vim text editor is related to the use of sprintf to write to the error buffer, which is passed to functions that handle option renames. Exploiting this vulnerability allows an attacker to execute arbitrary code...
SUSE CVE-2020-6812
The first time AirPods are connected to an iPhone, they become named after the user's name by default e.g. Jane Doe's AirPods. Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that...
Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission
The Mozilla Foundation Security Advisory describes this flaw as: The first time AirPods are connected to an iPhone, they become named after the user's name by default e.g. Jane Doe's AirPods. Websites with camera or microphone permission are able to enumerate device names, disclosing the user's...
Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission
The Mozilla Foundation Security Advisory describes this flaw as: The first time AirPods are connected to an iPhone, they become named after the user's name by default e.g. Jane Doe's AirPods. Websites with camera or microphone permission are able to enumerate device names, disclosing the user's...
CVE-2019-19685
RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions...
Design/Logic Flaw
RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions...
CVE-2019-19685
RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions...
CVE-2017-18453
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
CVE-2017-18453
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...