85469 matches found
EUVD-2025-175349
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...
Zip Slip Vulnerability in NLTK Downloader Leading to Remote Code Execution
The NLTK downloader component contains a critical vulnerability where the unzipiter function uses zipfile.extractall without path validation or security checks. This allows malicious zip packages to achieve arbitrary code execution when extracted and loaded by NLTK. The vulnerability exists becau...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 3, 2025 to November 9, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! The LFInder Challenge:Refine your LFI hunting skills with an expanded scope. Now through November 24, 2025, all LFI vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of...
CVE-2025-40164
In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...
CVE-2025-63892
creationtimestamp| type| source ---|---|--- 2025-11-13 08:35:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59514 2025-11-13 15:00:08+00:00| published-proof-of-concept| Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI 2025-11-18 17:49:45+00:00| seen|...
EUVD-2025-175663
Malicious code in warn-function-assert-report-thread npm...
EUVD-2025-178024
Malicious code in long-module-report-abstract-alpha npm...
EUVD-2025-179222
Malicious code in dysonswarm-joviology-node-sass-troposphere npm...
EUVD-2025-175557
Malicious code in whitedwarf-meissa-standard-mira npm...
EUVD-2025-175881
Malicious code in tree-notify-report-decrypt-scale npm...
Malicious code in sigma-file-signal-log-report (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e56f9455f2e267b6923668bc3fcc20ae59667c62ffee139e2dfe75c84d11eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180522
Malicious code in abstract-hash-key-report-load npm...
EUVD-2025-176690
Malicious code in report-water-view-cluster-socket npm...
EUVD-2025-178026
Malicious code in long-class-report-grep-catch npm...
EUVD-2025-176695
Malicious code in report-epsilon-socket-beta-sudo npm...
EUVD-2025-175866
Malicious code in try-data-signal-cloud-report npm...
EUVD-2025-178339
Malicious code in iota-report-phi-good-public npm...
EUVD-2025-180201
Malicious code in authorize-signal-report-omicron-decode npm...