13088 matches found
MAL-2025-1478 Malicious code in byted-player (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf324dae7bb985ac37aa0fff183e7f60d94c61c8b95b73049e79fcb49a52c27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BELL-CVE-2025-1125
Bulletin has no description...
BELL-CVE-2024-45782
Bulletin has no description...
BELL-CVE-2024-45778
Bulletin has no description...
BELL-CVE-2024-45780
Bulletin has no description...
CVE-2025-1370
A vulnerability, which was classified as critical, has been found in MicroWorld eScan Antivirus 7.0.32 on Linux. Affected by this issue is the function sprintf of the file epsdaemon of the component Autoscan USB. The manipulation leads to os command injection. An attack has to be approached...
CGA-9964-FHWF-8R48
Bulletin has no description...
CGA-25PW-P83C-P94H
Bulletin has no description...
CGA-X82H-7Q28-R9GR
Bulletin has no description...
BELL-CVE-2025-1371
Bulletin has no description...
MAL-2025-1390 Malicious code in suvauxlib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5b9068f18c537a559453b7350d3d2a6fc61ea7a7988f11236ee6909550a41b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3014 Malicious code in w3socket (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 729a8001d69369db2b822c1a13ba9363d3dad46299a6ced4e52ab604c3261ec4 web3socket: In the class there is a hidden code that loads a binary Python code from a remote location impersonating PyPI Github account web3node: The package ...
DLA-4056-1 golang-glog - security update
Bulletin has no description...
CVE-2025-26779
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Path Traversal.This issue affects Keep Backup Daily: from n/a through = 2.1.0...
CVE-2024-56477
IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2025-24565
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.3.3...
CVE-2025-24554
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awcode AWcode Toolkit awcode-toolkit allows Reflected XSS.This issue affects AWcode Toolkit: from n/a through = 1.0.14...
CVE-2025-24692
Missing Authorization vulnerability in M.Code Bulk Menu Edit bulk-menu-edit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Menu Edit: from n/a through = 1.3...