13073 matches found
MINI-4WJ7-3FHH-P8F7
Bulletin has no description...
MAL-2025-5908 Malicious code in dt-retag-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d21deb5c26c8d9b0043ce26b0fe5ec1625607ab1e1c37102589f92ab7187364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Security Bulletin: NVIDIA Jetson Orin, IGX Orin and Xavier Devices - July 2025
NVIDIA has released a software update for NVIDIA® Jetson Linux To protect your system, download and install this software update from the Jetson Download Center page, Jetson Linux 35.6.2 Link, Jetson Linux 36.4.4 Link and IGX Link. Go to NVIDIA Product Security...
MAL-2025-5857 Malicious code in @sfdc-ogs/v1-stable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf5cb65e88f9911d818fe4538c2454d53d9f0bac558bc6bd8bb2f8f8146d2ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-53824 WeGIA ReflectedCross-Site Scripting (XSS) vulnerability in endpoint 'cadastro_pet.php' parameter 'msg'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the editarpermissoes.php endpoint of the WeGIA application prior to version 3.4.4. This vulnerability allows attackers to...
Denial Of Service (DoS)
org.apache.tomcat:tomcat-coyote is vulnerable to Denial Of Service DoS. The vulnerability is due to failure to handle cases where an HTTP/2 client does not acknowledge the initial settings frame, allowing excessive concurrent streams and leading to resource exhaustion...
K000152565: Golang-JWT vulnerability CVE-2025-30204
Security Advisory Description golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a...
MAL-2025-6210 Malicious code in mgz-testpkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c82f0658f0d08613ec76f5066bad323001a5a95afc35b8befc4a34c82a68e0a7 The OpenSSF Package Analysis project identified 'mgz-testpkg' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
MINI-Q3RC-MW86-XQG6
Bulletin has no description...
Heap Buffer Overflow
ExecuTorch is vulnerable to Heap Buffer Overflow. The vulnerability is due to improper handling of buffer boundaries during the loading of ExecuTorch methods, which allows an attacker to cause a runtime crash and potentially execute arbitrary code...
PT-2025-29468 · Unknown · Simple Php Shopping Cart
Name of the Vulnerable Software and Affected Versions: Simple Shopping Cart version 1.0 Description: A vulnerability exists in Simple Shopping Cart that allows for remote SQL injection. The vulnerability is located in the /register.php file, specifically through manipulation of the ruser email...
MINI-FJPH-7VR4-RGX6
Bulletin has no description...
MINI-5GHQ-3FVH-M4P8
Bulletin has no description...
MINI-2JX6-JGHF-FHM4
Bulletin has no description...
MAL-2025-6075 Malicious code in cbd2.1 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8993bc07e0fceff0fe2da225bca50422f04aa7a8a35e864b478205a6e99786e4 Any computer that has this package installed or running should be considered...
MINI-FJH2-M992-M6FX
Bulletin has no description...
MINI-PGCJ-W463-XQJ2
Bulletin has no description...
MINI-C4P5-Q63X-JQ26
Bulletin has no description...