1621 matches found
EUVD-2023-26220
Malicious code in bioql PyPI...
EUVD-2025-24576
Malicious code in bioql PyPI...
EUVD-2025-2496
Malicious code in bioql PyPI...
EUVD-2025-2506
Malicious code in bioql PyPI...
EUVD-2023-25642
Malicious code in bioql PyPI...
EUVD-2023-25643
Malicious code in bioql PyPI...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-geoipfilter, lvm-driver, container-object-storage-interface, octo-sts, mongodb-kubernetes-operator, local-path-provisioner, nats, vault-k8s, sftpgo-plugin-pubsub, terraform-provider-time, vault-benchmark, newrelic-fluent-bit-output,...
CVE-2025-8463
Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forceful Browsing. This issue affects SecHard: before 3.6.2-20250805...
CVE-2025-8463
The CVE-2025-8463 entry maps to an authorization bypass in Nebula Informatics SecHard (SecHard) prior to version 3.6.2-20250805, caused by user-controlled key manipulation that bypasses authorization controls (parameter injection risk noted in PT-2025-38148). Affected component appears to be the ...
Malicious code in apachecn-sec-zh-pt2 (npm)
The package apachecn-sec-zh-pt2 was found to contain malicious code...
MAL-2025-43475 Malicious code in apachecn-sec-zh-pt2 (npm)
The package apachecn-sec-zh-pt2 was found to contain malicious code...
MAL-2025-44926 Malicious code in kssd-volyiyi-web-sec (npm)
The package kssd-volyiyi-web-sec was found to contain malicious code...
CVE-2023-21475
Out-of-bounds Write vulnerability in libaudiosaplussec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code...
PT-2025-35668
Name of the Vulnerable Software and Affected Versions: libaudiosaplus sec.so versions prior to SMR Apr-2023 Release 1 Description: An out-of-bounds write issue exists in the libaudiosaplus sec.so library. This can allow a local attacker to execute arbitrary code. Recommendations: Update...
UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats
A China-nexus threat actor known as UNC6384 has been attributed to a set of attacks targeting diplomats in Southeast Asia and other entities across the globe to advance Beijing's strategic interests. "This multi-stage attack chain leverages advanced social engineering including valid code signing...
CVE-2025-50612
A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset in the payload, which may cause the program to crash and potentially lead to a Deni...
Malicious code in sec-learning (npm)
The package sec-learning was found to contain malicious code...
Malicious code in sj-tw-sec (npm)
The package sj-tw-sec was found to contain malicious code...