12935 matches found
‘ChatGPT Tainted Memories’ Exploit Enables Command Injection in Atlas Browser
LayerX Security found a flaw in OpenAI’s ChatGPT Atlas browser that lets attackers inject commands into its memory, posing major security and phishing risks...
CVE-2025-10561
Rejected reason: This CVE ID was assigned in error. The End-of-Life status of a component, by itself, does not constitute a vulnerability under the CVE Program’s rules. This condition represents a security weakness CWE-1104: Use of Unmaintained Third-Party Components rather than a specific...
EUVD-2025-36150
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections...
Malicious Package
Overview vue-sfc-require-hook is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
PT-2025-44026
Name of the Vulnerable Software and Affected Versions Pi-hole Admin Interface versions prior to 6.3 Description The Pi-hole Admin Interface, a web interface for managing the Pi-hole advertisement and internet tracker blocking application, contains a Carriage Return Line Feed CRLF injection flaw...
QueryIPI: Query-Agnostic Indirect Prompt Injection on Coding Agents
Modern coding agents integrated into IDEs combine powerful tools and system-level actions, exposing a high-stakes attack surface. Existing Indirect Prompt Injection IPI studies focus mainly on query-specific behaviors, leading to unstable attacks with lower success rates. We identify a more sever...
Malicious code in @aml-ark/ark-experience-byteplus (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b9a81d78ce8d8f1da9a31e80166834c3098ef03d5ef0e58e1a03d1d93418314 Any computer that has this package installed or running should be considered...
Malicious code in dhhdbank92013 (npm)
The package dhhdbank92013 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in ragstack-ai (npm)
The package ragstack-ai was found to contain malicious code...
Malicious code in jvector-release (npm)
The package jvector-release was found to contain malicious code...
Malicious code in dhnas (npm)
The package dhnas was found to contain malicious code...
Malicious code in frontend-vite (npm)
The package frontend-vite was found to contain malicious code...
MAL-2025-48719 Malicious code in ldhpgemrdhs60152 (npm)
The package ldhpgemrdhs60152 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
EUVD-2025-35727
Captive Portal can expose sensitive information...
Malicious code in node-dev-config (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in example-ssr (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48831 Malicious code in dayotest21938 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in circuit-runtime-test (npm)
--- -= Per source details. Do not edit below this line.=-...
