1015 matches found
EUVD-2025-180006
Malicious code in boolean-balance-delta-visualize-resolve npm...
EUVD-2025-176800
Malicious code in rain-final-bash-bad-resolve npm...
EUVD-2025-176532
Malicious code in sandbox-scale-promise-unix-resolve npm...
EUVD-2025-176478
Malicious code in secure-old-deploy-resolve-encode npm...
MAL-2025-185761 Malicious code in bash-water-resolve-unix-error (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa208583cc81c4598465e3b44b85048c1d4a747fe9087200fc8eabae365d5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Remote Code Execution (RCE)
Llama Stack is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper validation of parameters in the resolveastbytype function, which allows an attacker to supply malicious input leading to arbitrary code execution...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989021)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989021 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdmaresolveroute memory leak Fix a memory leak when mdaresolveroute is called more...
EUVD-2025-36708
win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists...
CVE-2025-11202
CVE-2025-11202 relates to win-cli-mcp-server. The issue is in the resolveCommandPath function where a user-supplied string is used to invoke a system call without proper validation, enabling a remote command execution (RCE). The exploit is unauthenticated and would execute code in the service acc...
Windows CLI MCP Server 操作系统命令注入漏洞
Windows CLI MCP Server is a context protocol server for Simon Benedict Individual Developer. An operating system command injection vulnerability exists in Windows CLI MCP Server that stems from the resolveCommandPath method not properly validating a user input string, which could lead to remote...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987546)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987546 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Ensure rdmaaddrcancel happens before issuing more requests The FSM can run in a circle...
EUVD-2011-1033
Malware in sbrugna...
EUVD-2021-0563
Malware in sbrugna...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986316)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986316 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdmaresolveroute memory leak Fix a memory leak when mdaresolveroute is called more...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the resolvecontentpath process. An attacker can cause a write operation to occur one byte past the end of a heap-allocated buffer by crafting a specially designed MPEG-DASH manifest that triggers the appending of ...
CVE-2025-59728 Heap-buffer-overflow write in FFmpeg MDASH resolve_content_path
When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...
EUVD-2022-7077
Malicious code in bioql PyPI...
EUVD-2025-5501
Malicious code in bioql PyPI...