19716 matches found
MAL-2025-20340 Malicious code in fe-state (npm)
The package fe-state was found to contain malicious code...
MAL-2025-37600 Malicious code in ui5-mobx-state-tree (npm)
The package ui5-mobx-state-tree was found to contain malicious code...
MAL-2025-34808 Malicious code in test-mlw1-state-tides-miffy-buroo (npm)
The package test-mlw1-state-tides-miffy-buroo was found to contain malicious code...
MAL-2025-31938 Malicious code in redis-state (npm)
The package redis-state was found to contain malicious code...
Malicious code in new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve (npm)
The package new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve was found to contain malicious code...
Malicious code in fe-state (npm)
The package fe-state was found to contain malicious code...
Malicious code in redis-state (npm)
The package redis-state was found to contain malicious code...
Malicious code in @malware-test-state-tides-miffy-buroo/test-mlw3-state-tides-miffy-buroo (npm)
The package @malware-test-state-tides-miffy-buroo/test-mlw3-state-tides-miffy-buroo was found to contain malicious code...
MAL-2025-27354 Malicious code in new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve (npm)
The package new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve was found to contain malicious code...
CVE-2025-53789
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2025-5998 PPWP < 1.9.11 - Subscriber+ Access Bypass via REST API
The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a password authorization, however users with subscriber or greater roles can view content via the REST API...
PT-2025-33294 · 5094-Iy8 · 5094-Iy8
Name of the Vulnerable Software and Affected Versions: 5094-IY8 device affected versions not specified Description: A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited. This causes the module to enter a fault state, indicated by a flashing red...
Rockwell Automation FLEX 5000 安全漏洞
The Rockwell Automation FLEX 5000 is a high-speed counter module from Rockwell Automation. A security vulnerability exists in the Rockwell Automation FLEX 5000 that stems from incorrect handling of a CIP Class 32 request causing the module to enter a fault state...
CVE-2025-9042: Improper Validation of Specified Type of Input
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...
CVE-2025-9041: Improper Validation of Specified Type of Input
A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...
The vulnerability of the Confluence plugin for the instant messaging application Mattermost, related to insufficient checking of unusual or exceptional states, allows a hacker to trigger a service failure.
The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Confluence plugin for the instant messaging application Mattermost, related to insufficient checking of unusual or exceptional states, allows a hacker to trigger a service failure.
The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
webkitgtk: Processing maliciously crafted web content may disclose internal states of the app
A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper input validation, resulting in the disclosure of the internal states of the application...
webkitgtk: Processing maliciously crafted web content may disclose sensitive user information
A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...
webkitgtk: Processing maliciously crafted web content may disclose sensitive user information
A flaw was found in WebKitGTK. Processing malicious web content can disclose sensitive user information due to improper state management...