277951 matches found
CVE-2025-64778
NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database...
MAL-2025-192267 Malicious code in elf-stats-snowdusted-lantern-234 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e99540b0f05f5a187e448be6d70c67d6915e7ae75857be07c50497fa5108e46 The package elf-stats-snowdusted-lantern-234 was found to contain malicious code...
K000158059: Next.js vulnerability CVE-2025-66478
Security Advisory Description This CVE is a duplicate of CVE-2025-55182. CVE-2025-66478 For the F5 response to CVE-2025-55182, refer to K000158058: React framework vulnerability CVE-2025-55182. Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status...
EUVD-2025-201049
Malicious code in elf-stats-tinsel-train-397 npm...
K000158058: React framework vulnerability CVE-2025-55182
Security Advisory Description A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable...
Malicious code in elf-stats-sleighing-stocking-579 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2697cfcf138d4632b78908e7efa407bc80e1159f5a85f376d6b52c939f9c84 The package elf-stats-sleighing-stocking-579 was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in elf-stats-shimmering-nightcap-245 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95779350b65987bcf2418d22451fcb1dd24045f0665ab0e2a2b735961ae2d508 The package elf-stats-shimmering-nightcap-245 was found to contain malicious code...
MAL-2025-192124 Malicious code in elf-stats-rooftop-hammer-580 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f8e0b61802c2ebee9fe5ddb54aee5ab39d5cd53e658b235a4543c99e91e383 The package elf-stats-rooftop-hammer-580 was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-200864
Malicious code in elf-stats-merry-sparkler-742 npm...
EUVD-2025-200932
Malicious code in elf-stats-evergreen-bow-653 npm...
Malicious code in elf-stats-storybook-marshmallow-729 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9e1e445ab784bb20608d634e3d9e01c84179338478a75b8029624e3ac3b1dd The package elf-stats-storybook-marshmallow-729 was found to contain malicious code...
MAL-2025-192116 Malicious code in elf-stats-piney-garland-824 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056e411aadf351523d72a2574856fd1d83cb391aa1eecdfcc64d38c50ee07af1 The package elf-stats-piney-garland-824 was found to contain malicious code...
MAL-2025-192182 Malicious code in elf-stats-twinkling-reindeer-382 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f30c165d0ff07dad2ec7ee7f8cb4634c73ca0cd6639278c5f5b5f9e3107fb3 The package elf-stats-twinkling-reindeer-382 was found to contain malicious code...
Malicious code in elf-stats-merry-chimney-765 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0435e21ddce3b9d114ac17bbe0bcb5977f29f67aed49768c7273851c2f70b703 The package elf-stats-merry-chimney-765 was found to contain malicious code...
BIT-ACTIVEMQ-2022-41678 Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...
BIT-ACTIVEMQ-2020-26217 Remote Code Execution in XStream
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist i...
BIT-ACTIVEMQ-2020-13947
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0...
BIT-ACTIVEMQ-2020-11998
A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack:...
CVE-2025-13949 ProudMuBai GoFilm FileController.go SingleUpload unrestricted upload
A vulnerability was identified in ProudMuBai GoFilm 1.0.0/1.0.1. Impacted is the function SingleUpload of the file /server/controller/FileController.go. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and...
