12952 matches found
MAL-2025-46319 Malicious code in tiara-gudeg98-breki (npm)
The package tiara-gudeg98-breki was found to contain malicious code...
Malicious code in zain-klanting17-breki (npm)
The package zain-klanting17-breki was found to contain malicious code...
Malicious code in fajar-lengko9-breki (npm)
The package fajar-lengko9-breki was found to contain malicious code...
Malicious code in chongsu-xinling (npm)
The package chongsu-xinling was found to contain malicious code...
Malicious code in dujiaoshou-nengliang-liaoyu (npm)
The package dujiaoshou-nengliang-liaoyu was found to contain malicious code...
Malicious code in minecoins-free485 (npm)
The package minecoins-free485 was found to contain malicious code...
Malicious code in @crabas0npm/error-iure-dolorum-saepe (npm)
The package @crabas0npm/error-iure-dolorum-saepe was found to contain malicious code...
Malicious code in airbnb-petrology-polaris-singularitarianism (npm)
The package airbnb-petrology-polaris-singularitarianism was found to contain malicious code...
Malicious code in vina-rangi35-kyuki (npm)
The package vina-rangi35-kyuki was found to contain malicious code...
Malicious code in erick-kue26-breki (npm)
The package erick-kue26-breki was found to contain malicious code...
MAL-2025-43465 Malicious code in apachecn-jquery-zh-pt2 (npm)
The package apachecn-jquery-zh-pt2 was found to contain malicious code...
MAL-2025-45583 Malicious code in pp-react-theme (npm)
The package pp-react-theme was found to contain malicious code...
Malicious code in @auro-formkit/config (npm)
The package @auro-formkit/config was found to contain malicious code...
Malicious code in vscode-resources (npm)
The package vscode-resources was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
PT-2025-36342
Name of the Vulnerable Software and Affected Versions: AMD TEE affected versions not specified Description: Insufficient bounds checking in AMD TEE Trusted Execution Environment could allow an attacker with a compromised userspace to invoke a command with malformed arguments, leading to...
FROST 安全漏洞
FROST is a Rust library open-sourced by the Zcash Foundation. A security vulnerability exists in FROST versions 2.0.0 through 2.1.0, which stems from the fact that refreshing shares with smaller minsigners reduces group security...
PT-2025-36321
Name of the Vulnerable Software and Affected Versions: PTZOptics and ValueHD-based pan-tilt-zoom cameras affected versions not specified Description: PTZOptics and ValueHD-based pan-tilt-zoom cameras utilize default, shared credentials for the administrative web interface. This allows unauthorize...
CVE-2025-58359 frost-core: refresh shares with smaller min_signers will reduce group security
ZF FROST is a Rust implementation of FROST Flexible Round-Optimised Schnorr Threshold signatures. In versions 2.0.0 through 2.1.0, refresh shares with smaller minsigners will reduce security of group. The inability to change minsigners i.e. the threshold with the refresh share functionality...
GHSA-QPR4-C339-7VQ8 Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter
Summary When using Astro's Cloudflare adapter @astrojs/cloudflare configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URLs it receives, allowing content from unauthorized third-party domains to be served...
