13120 matches found
BELL-CVE-2025-38295
Bulletin has no description...
BELL-CVE-2025-38275
Bulletin has no description...
BELL-CVE-2025-38274
Bulletin has no description...
BELL-CVE-2025-38272
Bulletin has no description...
BELL-CVE-2025-38332
Bulletin has no description...
MAL-2025-6569 Malicious code in puregram (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7bd190edcbb3734a8578c4e0c5dbd9655bc59613d53e67bfd04b3604cf1aa328 The code is automatically starting, calling a Telegram channel with basic info, and waits for remote code to execute --- Category: MALICIOUS - The campaign has...
CVE-2025-30403
A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. This issue affects mvfst versions prior to v2025.07.07.00...
CGA-5GPW-6W3J-XR7H
Bulletin has no description...
CGA-MW7C-5H2V-JM7G
Bulletin has no description...
CGA-XGX2-R76Q-V9MW
Bulletin has no description...
RUSTSEC-2025-0043 matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`
The SqliteEventCacheStore::findeventwithrelations function constructs SQL queries using format! with unescaped input, allowing an attacker to inject arbitrary SQL. This results in a SQL injection vulnerability...
MINI-J7FR-7QQ6-MXHQ
Bulletin has no description...
BELL-CVE-2025-38337
Bulletin has no description...
BELL-CVE-2024-43394
Bulletin has no description...
BELL-CVE-2025-38336
Bulletin has no description...
MINI-RP6Q-C3PX-84RF
Bulletin has no description...
MAL-2025-5774 Malicious code in dtcp-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6735c1027226ecf96f1649634b0f5e6177c10f5cd381586d03cd9f38015d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MINI-JGGR-2452-8FFH
Bulletin has no description...
CVE-2025-53632 Chall-Manager's scenario decoding process does not check for zip slips
Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario i.e. a zip archive, the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentication nor authorization, so anyone can...