MAL-2025-364 Malicious code in solc-0.6.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c99978d8a7731b6066088030bd9e8d6f94156c1fe574f1e7490dd1e2913101a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Leakage

symfony/http-client is vulnerable to IP/port enumeration. The vulnerability is due to improper handling of IP filtering in the NoPrivateNetworkHttpClient, which fails to block certain IPs early enough during host resolution, allowing an attacker to enumerate IP addresses and ports, potentially...

Malicious code in nodelement (npm)

The package contains code to download and execute an infostealer payload...

GHSA-F9QJ-77Q2-H5C5 vulnerabilities

Vulnerabilities for packages: jenkins...

Malicious code in pysbark (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8eb82be602cc0d4c10e768559d90db6457348a41e6e789d8bd6f7c31387b099e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-2981 Malicious code in opengrep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8de001a262d51e9750f84bfa2f6d30f5798aca9d0614b5feb95215ed1ced0507 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in @zitterorg/beatae-provident-ea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85cbdbe2538d320a054069e84937c9edcb7ec3c61898017d8c94581a78fd397d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGA-69MX-3XCC-QGQ5

Bulletin has no description...

CVE-2024-25978 Msa-24-0001: denial of service risk in file picker unzip functionality

Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality...

PT-2024-2152

Name of the Vulnerable Software and Affected Versions X-Rite MAT 6 Kohinoor affected versions not specified Description The issue is related to incorrect restriction of a directory path name with limited access in the X-Rite MAT 6 Kohinoor embedded spectrophotometer software. Exploitation of this...

MAL-2023-8470 Malicious code in jest-coverage-report-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a570942cc8be879311bbb1b601f658554c30fa3734aacac08c1c53289da55bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-24551 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a missing permission check in the telephony service, which could lead to local information disclosure without requiring additional execution privileges...

agogosml-cli (=0.1.2), chip-wallet-dstack (>=1.3.0 <=1.5.0) +23 more potentially affected by CVE-2023-32758 via git-url-parse (>=1.0.2 <=1.2.2)

git-url-parse PYPI version =1.0.2, =1.3.0, =1.11.4, =0.3.1.1, =0.5.0, =0.0.4, =0.1.2, =0.1.0, =0.0.1, =0.25.0, =0.3.10, =0.6.8 and more Source cves: CVE-2023-32758 Source advisory: OSV:GHSA-4XQQ-73WG-5MJP...

PT-2023-35798 · Git +1 · Wabt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with an unknown write issue. The crash involves the std:: 1::allocator traits and std:: 1::vector functions, specifically with...

Malicious code in my-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9a2c5c46b8e8654ac9432c80b3ce72083cda20ffada8ef7098636fd56eae3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custom-cldr-rules-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5d09f0eb89f3f104480711ff0d04c3de13f8456e4cfc65796e6c8a53db2bb70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +102 more potentially affected by CVE-2022-23583 via tensorflow-cpu (>=1.15.0 <=2.4.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2022-23583 Source advisory: OSV:PYSEC-2022-92...

brainhance (=0.0.1), crystal4d (>=0.0.4 <=0.1.2) +3 more potentially affected by CVE-2021-29548 via tensorflow-gpu (>=2.4.0 <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu =0.6.3 Source cves: CVE-2021-29548 Source advisory: OSV:PYSEC-2021-674...

Knowing when it’s worth the risk: riskware explained

If there’s one thing I like more than trivia quizzes, it’s quotes. Positive, inspirational, and motivational quotes. Quotes that impart a degree of ancient wisdom, or those that make you stop and consider. Reading them melts our fears, sorrows, and feelings of inadequacy away. Some of the most...

CVE-2019-12269

Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text...