1464 matches found
EUVD-2025-51768
Malicious code in strict-scarlet-lungfish npm...
EUVD-2025-51772
Malicious code in strict-copper-tyrannosaurus npm...
Malicious code in strict-crimson-spider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd83796d804f3ed5ccaed1790eafea045b3b054603a40d0718b3fb5cf72aff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51774
Malicious code in strict-aquamarine-puffin npm...
EUVD-2025-51771
Malicious code in strict-crimson-spider npm...
EUVD-2025-51769
Malicious code in strict-pink-whippet npm...
Malicious code in strict-pink-whippet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ad0614a731a49217e438755be383bf6646bcfd03d610c40b9ae189f48e89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Astra Linux – Vulnerability in Apache2
In some modssl configurations on the Apache HTTP Server 2.4.35 to 2.4.63, it is possible for trusted clients to bypass access controls using TLS 1.3 session resumption. These configurations are affected when modssl is configured for multiple virtual hosts, with each virtual host being restricted ...
EUVD-2025-36764
Malicious code in transform-strict-mode npm...
Malicious code in transform-strict-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b1eba84b6c8867605a410bc60af12768528aecb23257d4925bc3376c2ca8b85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview transform-strict-mode is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-49052 Malicious code in transform-strict-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b1eba84b6c8867605a410bc60af12768528aecb23257d4925bc3376c2ca8b85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Siemens SIMATIC Devices Improper Locking (CVE-2024-50210)
In the Linux kernel, the following vulnerability has been resolved: posix-clock: posix-clock: Fix unbalanced locking in pcclocksettime If getclockdesc succeeds, it calls fget for the clockid's fd, and get the clk-rwsem read lock, so the error path should release the lock to make the lock balance...
CVE-2025-61919 Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing
Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, Rack::RequestPOST reads the entire request body into memory for Content-Type: application/x-www-form-urlencoded, calling rack.input.readnil without enforcing a length or cap. Large request bodies can therefo...
CVE-2025-48043 Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/authorizer/authorizer.ex and program routines 'Elixir.Ash.Policy.Authorizer':strictfilters/2. This issue affects ash: from 0.1.0 before 3.6.2...
CVE-2025-48043
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/authorizer/authorizer.ex and program routines 'Elixir.Ash.Policy.Authorizer':strictfilters/2. This issue affects ash: from 0.1.0 before 3.6.2...
CVE-2025-48043 Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization
Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated with program files lib/ash/policy/authorizer/authorizer.ex and program routines 'Elixir.Ash.Policy.Authorizer':strictfilters/2. This issue affects ash: from 0.1.0 before 3.6.2...
EUVD-2021-16166
Malware in sbrugna...