231 matches found
CVE-2026-2659 Squirrel sqfuncstate.cpp PopTarget out-of-bounds
A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Executing a manipulation of the argument targetstack can lead to out-of-bounds read. It is possible to launch the attack o...
CVE-2026-2659
The vulnerability CVE-2026-2659 affects Squirrel up to version 3.2. It resides in SQFuncState::PopTarget within src/squirrel/squirrel/sqfuncstate.cpp, where manipulating the _target_stack can cause an out-of-bounds read during local execution. Publicly disclosed exploits exist per the sources, an...
CVE-2026-2659 Squirrel sqfuncstate.cpp PopTarget out-of-bounds
A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Executing a manipulation of the argument targetstack can lead to out-of-bounds read. It is possible to launch the attack o...
CVE-2026-2659
A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Executing a manipulation of the argument targetstack can lead to out-of-bounds read. It is possible to launch the attack o...
SQUIRREL 安全漏洞
SQUIRREL is a programming language developed by Alberto Demichelis. It is the stable version of SQUIRREL 3.2. Versions of SQUIRREL 3.2 and earlier have security vulnerabilities. These vulnerabilities stem from a heap buffer overflow in the SQObjectPtr::operator function in the sqobject.h library,...
PT-2026-20485
A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be...
SQUIRREL 缓冲区错误漏洞
SQUIRREL is the stable version of the programming language SQUIRREL 3.2. Versions of SQUIRREL 3.2 and earlier had a buffer error vulnerability, which stemmed from improper handling of parameters and the target stack. This vulnerability could lead to out-of-bounds read operations...
PT-2026-20480
A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTarget of the file src/squirrel/squirrel/sqfuncstate.cpp. Executing a manipulation of the argument target stack can lead to out-of-bounds read. It is possible to launch the attack ...
EUVD-2025-117106
Malicious code in scornful-white-squirrel npm...
Malicious code in scornful-white-squirrel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-138996 Malicious code in scornful-white-squirrel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-97535
Malicious code in keensquirrelz3n npm...
EUVD-2025-101341
Malicious code in artificialsquirrelz3n npm...
EUVD-2025-94905
Malicious code in subjectivesquirrelz3n npm...
EUVD-2025-74473
Malicious code in managerialsquirrelolive-93 npm...
EUVD-2025-74292
Malicious code in retiredsquirrelamaranth-28 npm...
MAL-2025-109109 Malicious code in steady_squirrel-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5418c3c0a29d8d44c52280a1763e22616a4d512dab80f9873868adb1414ce7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in yearling_squirrel-biggestdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eec701bb75a55a53b4504a841a763e640c0757205070b8a20a70693f0a5889b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...