85482 matches found
EUVD-2025-117521
Malicious code in adequate-purple-lynx npm...
EUVD-2025-117147
Malicious code in puzzled-olive-deer npm...
EUVD-2025-117351
Malicious code in glamorous-chocolate-blackbird npm...
kernel: HID: core: fix shift-out-of-bounds in hid_report_raw_event
A flaw was found in the Linux kernel's Human Interface Device HID core. A local attacker with low privileges could exploit a shift-out-of-bounds vulnerability in the hidreportrawevent function. This occurs when the size of an integer in the snto32 function exceeds 32 bits, leading to an invalid...
kernel: HID: core: Harden s32ton() against conversion to 0 bits
In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...
Rarlab WinRAR security vulnerability
Rarlab WinRAR is a file compression/decompression software from Rarlab. A security vulnerability exists in Rarlab WinRAR version 7.11, which originates from cross-site scripting in the Generate Report function and could lead to the disclosure of user information...
CVE-2025-52331
Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...
PT-2025-46677
Name of the Vulnerable Software and Affected Versions WinRAR version 7.11 Description A cross-site scripting XSS issue exists in the generate report functionality. This allows attackers to potentially disclose user information, including the computer username, generated report directory, and IP...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990853)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990853 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougarreportfixup reportfixup for the Cougar 500k...
CVE-2025-52331: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...
CVE-2025-52331
Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...
CVE-2025-52331
A Cross-site scripting (XSS) vulnerability exists in the generate report functionality of Rarlab WinRAR 7.11 . The root cause is the inclusion of archived file names in the HTML report without proper validation, which allows for the injection of malicious HTML tags. Successful exploitation requir...
EUVD-2025-98832
Malicious code in fitri-ketoprak8-riris npm...
EUVD-2025-100688
Malicious code in cici-mieaceh49-riris npm...
EUVD-2025-103979
Malicious code in mahesa-bakwan15-riris npm...
EUVD-2025-98736
Malicious code in galih-getas5-riris npm...
EUVD-2025-99836
Malicious code in dian-kue97-riris npm...
EUVD-2025-101860
Malicious code in thoughtlessbadgerz3n npm...