44345 matches found
CVE-2025-12875
A weakness has been identified in mruby 3.4.0. This vulnerability affects the function aryfillexec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be launched locally. The exploit has been...
CVE-2025-12863
Rejected reason: This CVE was assigned for a libxml2 issue1012 but later deemed not valid. Ref.: https://gitlab.gnome.org/GNOME/libxml2/-/issues/1012note2608283...
“I Paid Twice” Scam Infects Booking.com Users with PureRAT via ClickFix
Cybersecurity firm Sekoia reports a widespread fraud where criminals compromise hotel systems Booking.com, Expedia and others with PureRAT malware, then use stolen reservation data to phish and defraud guests...
Malicious Package
Overview MyDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...
Malicious Package
Overview SqlUnicornCore is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...
Malicious Package
Overview SqlLiteRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 a...
Malicious Package
Overview SqlUnicorn.Core is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...
Malicious Package
Overview SqlRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...
Malicious Package
Overview SqlDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...
Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation
A set of nine malicious NuGet packages has been identified as capable of dropping time-delayed payloads to sabotage database operations and corrupt industrial control systems. According to software supply chain security company Socket, the packages were published in 2023 and 2024 by a user named...
MAL-2025-49385 Malicious code in tailwindcss-gustify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1671650b65b4934845aada45f513b1bea7032ea94d90f9e1517e60bce563b621 The package tailwindcss-gustify was found to contain malicious code. Source: ghsa-malware...
CVE-2025-60542 vulnerabilities
Vulnerabilities for packages: redisinsight...
SUSE CVE-2025-62768
unknown...
QNAP Systems File Station 5 代码问题漏洞
QNAP Systems File Station 5 is a file management software from QNAP Systems. A code issue vulnerability exists in QNAP Systems File Station 5 that stems from a null pointer dereference that could lead to a denial of service attack...
QNAP Systems File Station 5 代码问题漏洞
QNAP Systems File Station 5 is a file management software from QNAP Systems. A code issue vulnerability exists in QNAP Systems File Station 5 that stems from a null pointer dereference that could lead to a denial of service attack...
Linux Distros Unpatched Vulnerability : CVE-2025-12729
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific...
QNAP Systems QuLog Center 跨站脚本漏洞
QNAP Systems QuLog Center is a report field for China-based QNAP Systems that logs events reported by the system. A cross-site scripting vulnerability exists in QNAP Systems QuLog Center version 1.8.2.923, which stems from susceptibility to cross-site scripting attacks that could result in...
The vulnerability of the NvMap component in microprogramming software for embedded AI platforms such as NVIDIA Jetson Orin Series, NVIDIA Jetson Xavier Series, NVIDIA Jetson Thor Series, and IGX Orin, which allows a hacker to trigger a service failure.
The vulnerability of the NvMap component in microprogramming software for embedded AI platforms such as NVIDIA Jetson Orin Series, NVIDIA Jetson Xavier Series, NVIDIA Jetson Thor Series, and IGX Orin is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow...
Oracle Linux 10 : sssd (ELSA-2025-19851)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19851 advisory. - Resolves: RHEL-120286 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems rhel-10.0.z Tenable...