3542 matches found
Path Traversal
Liferay Portal is vulnerable to path traversal. The vulnerability is due to improper validation of query strings in the ComboServlet, which allows an attacker to access arbitrary CSS/JS files and repeatedly load them to exploit the system...
CVE-2025-6599
An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...
Malicious code in minemeld-core (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
EUVD-2025-179673
Malicious code in colors-style-loader-bellatrix-tool npm...
EUVD-2025-176168
Malicious code in style-loader-node-sass-graphql-nashira npm...
EUVD-2025-180408
Malicious code in antd-style-loader-miranda-uninstall npm...
Malicious code in tree-notify-fire-resolve-scale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58286446bdb6c6f5f5005a6bc809b0344a781e5d24164ab1e56e1fe30e434940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176169
Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...
EUVD-2025-178285
Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...
EUVD-2025-179034
Malicious code in eslint-plugin-pyxis-library-style-loader npm...
EUVD-2025-176814
Malicious code in radioastronomy-augmentedreality-library-style-loader npm...
EUVD-2025-179398
Malicious code in darkenergy-style-loader-style-loader-node-config npm...
EUVD-2025-180459
Malicious code in algol-elektra-rollup-style-loader npm...
EUVD-2025-178769
Malicious code in ganymede-style-loader-xanthus-javascript npm...
EUVD-2025-180244
Malicious code in augmentedreality-mesosphere-style-loader-registry npm...
EUVD-2025-179977
Malicious code in boson-style-loader-less-loader-superflare npm...
EUVD-2025-176129
Malicious code in supercluster-command-betelgeuse-style-loader npm...
EUVD-2025-176109
Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin npm...
MAL-2025-185905 Malicious code in boson-style-loader-less-loader-superflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2f50bd5b7c71fb5520c30b341fe247f8acbf2e602197b32e39a8de63489160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...