932 matches found
EUVD-2025-77513
Malicious code in specifiedgamefowlcopper-95 npm...
EUVD-2025-84184
Malicious code in specifiedhaddockz3n npm...
EUVD-2025-71349
Malicious code in specifieddonkeyz3n npm...
EUVD-2025-73577
Malicious code in specifiedtiglonrequirement npm...
EUVD-2025-73582
Malicious code in specifiedbobolinkz3n npm...
EUVD-2025-73578
Malicious code in specifiedgazellez3n npm...
EUVD-2025-73581
Malicious code in specifiedcephalopodz3n npm...
EUVD-2025-66530
Malicious code in specifiedxerinaez3n npm...
EUVD-2025-51890
Malicious code in specified-beige-trout npm...
EUVD-2025-51889
Malicious code in specified-black-hookworm npm...
PT-2025-46459
Name of the Vulnerable Software and Affected Versions Windows Speech affected versions not specified Description An issue exists where sensitive information is inserted into sent data within Windows Speech. This could allow an authorized attacker to disclose information locally. Recommendations A...
EUVD-2025-49339
Malicious code in specifiedbonoboz3n npm...
MAL-2025-61330 Malicious code in specified_bonobo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4df4365620f9e0d959266e313d536e78c314f8febbc908fb98dd3a34aaa0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-49337
Malicious code in specifiedpenguinz3n npm...
PT-2025-46585
Name of the Vulnerable Software and Affected Versions rust-sudo-rs affected versions not specified Description A security update is available. The package rust-sudo-rs in Debian is affected by vulnerabilities. Recommendations At the moment, there is no information about a newer version that...
PT-2025-45377
Name of the Vulnerable Software and Affected Versions Rubygem MQTT affected versions not specified Description The Rubygem MQTT package did not have hostname validation enabled by default, which could allow for a Man-in-the-Middle MITM attack. This means a malicious actor could potentially...
CVE-2025-64136
A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...
PT-2025-44397
Name of the Vulnerable Software and Affected Versions tftpsync affected versions not specified Description A path traversal flaw exists in the tftpsync/add and tftpsync/delete scripts. A remote attacker on an adjacent network can potentially write or delete files on the filesystem with the...
CVE-2025-64139
A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2025-64136
A cross-site request forgery CSRF vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-specified HTTP server...