42350 matches found
Malicious code in awsm-acslibs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75908418c77ed1eed9d51f2880e20a9608a49fe6e21582715517f0fa4044d349 The package awsm-acslibs was found to contain malicious code. Source: ghsa-malware 566e39645aaa10c8e2d212725d48fa1023624b811c5d98b6c4cf6354d1beba95 A...
MAL-2026-146 Malicious code in spark-ar-dynamic-mocks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e041fd0dd06edcd5beedc3297cfb4326de3cb34e6e854601de47b872b93f9b24 The package spark-ar-dynamic-mocks was found to contain malicious code. Source: ghsa-malware...
Malicious code in tailwind-autoanimation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239c7b556685c76e1b25bf8ec701e0688ec975920ddc409d56365b6c38b30edc The package tailwind-autoanimation was found to contain malicious code. Source: ghsa-malware...
CVE-2025-66620 Columbia Weather Systems MicroServer Command Shell in Externally Accessible Directory
An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin access to MicroServer can gain limited shell access, enabling persistence through reverse shells, and the ability to modify or remove data stored in the fil...
CVE-2025-64305 Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk
MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal...
CVE-2025-69223 vulnerabilities
Vulnerabilities for packages: awx, apache-beam-python-3.11-sdk, open-webui, gitlab-cng, authentik, airflow, kserve, kubeflow-pipelines-visualization-server, dask-kubernetes, checkov, py3-cassandra-medusa, request-1276, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-12.4...
GHSA-JJ3X-WXRX-4X23 vulnerabilities
Vulnerabilities for packages: awx, apache-beam-python-3.11-sdk, open-webui, gitlab-cng, authentik, airflow, kserve, kubeflow-pipelines-visualization-server, dask-kubernetes, checkov, py3-cassandra-medusa, request-1276, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-12.4...
CVE-2025-4675
creationtimestamp| type| source ---|---|--- 2026-01-07 18:06:41+00:00| seen| Telegram/z4Hdig2Y-CzYhBdtVlGTwJ9KW9iSWl3bFYnRlWuZ8V2CdM 2026-01-08 19:06:02+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av26-011 2026-05-12 10:00:00+00:00| seen|...
CVE-2022-27502
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...
CVE-1999-0025
root privileges via buffer overflow in df command on SGI IRIX systems...
CVE-1999-0548
A superfluous NFS server is running, but it is not importing or exporting any file systems...
CVE-1999-0359
ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords...
CVE-1999-0197
finger 0@host on some systems may print information on some user accounts...
CVE-1999-0377
Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services...
CVE-1999-0027
root privileges via buffer overflow in eject command on SGI IRIX systems...
CVE-1999-0085
Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname...
CVE-1999-0768
Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable...
CVE-1999-0918
Denial of service in various Windows systems via malformed, fragmented IGMP packets...