42356 matches found
Malicious code in sd-pay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9616f3280e84767be7a4d7eb72057a907816c66dba6104915b31df22260c16f4 The package sd-pay was found to contain malicious code. Source: ghsa-malware a8a08228b2c2618675e777b8bd306f5499f39767b26a7e12deb1dc0ce91175b5 Any...
@inkeep/agents-manage-ui (>=0.0.0-dev-20251211233416, <=0.38.0), @react-email/preview-server (5.0.8) +1 more potentially affected by CVE-2025-55183 +2 more via next (16.0.9)
next NPM version 16.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @inkeep/agents-manage-ui =0.0.0-dev-20251211233416, =0.38.0 - @react-email/preview-server 5.0.8 - @tulip-systems/core 0.4.1 Source cves: CVE-2025-55183,...
Linux Distros Unpatched Vulnerability : CVE-2025-14332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so...
PT-2025-51037
Name of the Vulnerable Software and Affected Versions: WebKitGTK versions 2.50.4-0ubuntu0.25.04.1, Apple iOS, iPadOS, macOS, Safari, tvOS, and visionOS versions prior to 26.2. Description: This vulnerability is a use-after-free issue in WebKit, potentially leading to arbitrary code execution. The...
Linux Distros Unpatched Vulnerability : CVE-2025-67724
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers...
USN-7928-3 linux-realtime, linux-intel-iot-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Network drivers; - AFS file system; - F2FS file system; - Tracing...
Exploit for CVE-2025-12097
CVE-2025-12097 Description NI modification of Appweb serv...
CVE-2025-43873
creationtimestamp| type| source ---|---|--- 2025-12-11 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-02 2025-12-17 17:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma76nsevgv2r...
CVE-2025-66584
creationtimestamp| type| source ---|---|--- 2025-12-11 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03...
CVE-2025-66590
creationtimestamp| type| source ---|---|--- 2025-12-11 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03 2025-12-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1129/ 2025-12-17 05:00:00+00:00| seen|...
CVE-2025-66585
creationtimestamp| type| source ---|---|--- 2025-12-11 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03 2025-12-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1128/...
CVE-2025-13633 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6PGW-376W-JRXX vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-13639 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-H5PR-3M5W-7GM8 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-64715 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...
CVE-2025-13636 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-13635 vulnerabilities
Vulnerabilities for packages: chromium...