13073 matches found
MAL-2025-6435 Malicious code in aphisherman (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MS SWIFT WEB-UI RCE Vulnerability
I. Detailed Description: This includes scenarios, screenshots, vulnerability reproduction methods. For account-related vulnerabilities, please provide test accounts. If the reproduction process is complex, you may record a video, upload it to Taopan, and attach the link. 1. Install ms-swift pip...
MAL-2025-6746 Malicious code in nubank-www-latam-commons (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ef98f115341b4b410449098489bee4471969a706dfe619a9d7704d26fa5a1f The OpenSSF Package Analysis project identified...
CGA-47WX-M5HH-Q3RX
Bulletin has no description...
CGA-F6CH-XPRC-XWRM
Bulletin has no description...
MINI-H36C-J8GG-RXQ7
Bulletin has no description...
MINI-FMQ5-F632-FC4Q
Bulletin has no description...
MINI-6QM9-PM7W-Q29W
Bulletin has no description...
MINI-5R5F-6FRQ-66WX
Bulletin has no description...
MINI-2FVM-QMMP-J33M
Bulletin has no description...
CGA-3RWV-37PJ-GM94
Bulletin has no description...
CVE-2025-8366 Portabilis i-Educar educar_servidor_lst.php cross site scripting
A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...
CVE-2025-45768
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement...
CGA-8R46-4G7Q-W5W7
Bulletin has no description...
GO-2025-3824 Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama
Ollama vulnerable to Cross-Domain Token Exposure in github.com/ollama/ollama...
CVE-2025-54575 ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks
ImageSharp is a 2D graphics library. In versions below 2.1.11 and 3.0.0 through 3.1.10, a specially crafted GIF file containing a malformed comment extension block with a missing block terminator can cause the ImageSharp GIF decoder to enter an infinite loop while attempting to skip the block. Th...
MAL-2025-6691 Malicious code in actions-set-env-vars (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6716 Malicious code in enkryptcom (npm)
The package communicates with a domain associated with malicious activity...