Lucene search
K

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.0 views

Malicious code in serializes (npm)

The package serializes was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.0 views

MAL-2025-32994 Malicious code in serializes (npm)

The package serializes was found to contain malicious code...

7.2AI score
Exploits0
Debian
Debian
added 2023/01/11 10:54 p.m.39 views

[SECURITY] [DLA 3267-1] libxstream-java security update

Debian LTS Advisory DLA-3267-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 11, 2023 https://wiki.debian.org/LTS Package : libxstream-java Version : 1.4.11.1-1+deb10u4 CVE ID : CVE-2022-41966 Debian Bug : 1027754 XStream serializes Java objects to XML a...

8.2CVSS6.8AI score0.02686EPSS
Exploits1
Prion
Prion
added 2021/01/18 6:15 a.m.12 views

Remote code execution

OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the parametersactivity:ActivityDataGrid parameter. The PHP object injection exploit chain can leverage an destruct magic metho...

10CVSS9.8AI score0.19217EPSS
Exploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/03 7:57 p.m.12 views

Malicious Package in serializes

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

2.8AI score
Exploits0References2Affected Software1
Rows per page
Query Builder