13074 matches found
MAL-2025-5112 Malicious code in discorddox (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 52f656f62a0fe1e90282cf7e8004bfd78e69a854e5e7a9c33ef72b7e5b43b831 The package contains an embedded malicious executable probably blank grabber started when running the module. Probably continuation of 2025-05-pydoxing ---...
CGA-J2Q7-3P56-QCM7
Bulletin has no description...
K000151277: MySQL vulnerabilities CVE-2025-21580 and CVE-2025-21588
Security Advisory Description CVE-2025-21580 Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access v...
CGA-49WJ-7Q5W-W7GW
Bulletin has no description...
MAL-2025-3732 Malicious code in com.unity.render-pipelines.universal-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e796de3cb6203dc09766f14c46913307a4c760e4cd01047b30993c7ac605648c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-M7GM-V253-56HH @lumieducation/h5p-server Fails to Sanitize Plain Text Strings
Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings...
CVE-2023-53145 Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition In btsdioprobe, the data-work is bound with btsdiowork. It will be started in btsdiosendframe. If the btsdioremove runs with a unfinished work, there...
MAL-2025-3740 Malicious code in badgerdoc-storage (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 57170ed58e2cf5e3b4b32f443ae555c7c040f2a395b3505837c90e06add93db5 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...
CGA-MF22-CC26-82G9
Bulletin has no description...
BELL-CVE-2025-37879
Bulletin has no description...
BELL-CVE-2025-37870
Bulletin has no description...
BELL-CVE-2025-37887
Bulletin has no description...
BELL-CVE-2025-37861
Bulletin has no description...
BELL-CVE-2025-37850
Bulletin has no description...
BELL-CVE-2025-37844
Bulletin has no description...
CVE-2025-47817
In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter...
CGA-W8FV-QJHV-FF25
Bulletin has no description...
MAL-2025-6524 Malicious code in initer (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d2aac1e40660cbe4323a93d03087f3b9a2d596a5dcfcf2bae3cb0a2ab37cf646 File is designed to download, hide under system-like name, and run a remote executable, widely identified as malicious. --- Category: MALICIOUS - The campaign...
K000151256: MySQL vulnerability CVE-2025-30687
Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multipl...