6009 matches found
UBUNTU-CVE-2025-68258
In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3attach Syzbot identified an issue 1 in multiq3attach that induces a task timeout due to open or COMEDIDEVCONFIG ioctl operations, specifically, in the case of multiq3 driver. Thi...
CVE-2025-68258
In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3attach Syzbot identified an issue 1 in multiq3attach that induces a task timeout due to open or COMEDIDEVCONFIG ioctl operations, specifically, in the case of multiq3 driver. Thi...
GHSA-8VCH-M3F4-Q8JF Elysia affected by arbitrary code injection through cookie config
Arbitrary code execution from cookie config. If dynamic cookies are enabled ie there exists a schema for cookies, the cookie config is injected into the compiled route without first being sanitised. Availability of this exploit is generally low, as it requires write access to either the Elysia...
Schneider Electric EcoStruxure Foxboro DCS Advisor
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...
Exploit for Prototype Pollution in Typeorm
CVE-2020-8158: TypeORM Prototype Pollution Vulnerability O...
SUSE CVE-2022-24785
Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm server users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This...
PT-2025-47302
Name of the Vulnerable Software and Affected Versions SourceCodester Train Station Ticketing System version 1.0 Description A SQL injection weakness exists in the Train Station Ticketing System. This issue is related to the manipulation of the Username argument within the login functionality,...
EUVD-2025-179391
Malicious code in data-node-sanitize-balance-optimize npm...
EUVD-2025-175947
Malicious code in throw-omega-catch-hot-sanitize npm...
EUVD-2025-180004
Malicious code in boolean-fork-uglify-dog-sanitize npm...
EUVD-2025-178824
Malicious code in function-iota-sanitize-view-old npm...
EUVD-2025-178601
Malicious code in hash-authorize-sanitize-signal-cloud npm...
EUVD-2025-180209
Malicious code in authorize-interface-good-xi-sanitize npm...
EUVD-2025-176527
Malicious code in sanitize-module-pi-code-static npm...
EUVD-2025-176212
Malicious code in static-transpile-sanitize-emulate-parse npm...
EUVD-2025-176530
Malicious code in sanitize-analyze-benchmark-deploy-encode npm...
EUVD-2025-178413
Malicious code in info-user-wind-book-sanitize npm...
EUVD-2025-180263
Malicious code in async-parse-compile-sanitize-quick npm...
MAL-2025-189346 Malicious code in sanitize-eta-promise-error-awk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d20cc45b0c3561f876e2907c05759af75b6ae061f01d2d3240a3aefde578d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...