Lucene search
+L

17300 matches found

osv_mal
osv_mal
•added 2025/11/24 10:51 p.m.•20 views

MAL-2025-191031 Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/24 10:51 p.m.•5 views

Malware in @lessondesk/react-table-context

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/24 10:34 p.m.•18 views

CVE-2025-12800

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.4.5 via the sushortcodecsvtable function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make...

6.4CVSS5.8AI score0.00198EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/11/24 10:21 p.m.•5 views

Malware in prime-one-table

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/11/24 10:21 p.m.•11 views

EUVD-2025-199056

Malicious code in prime-one-table npm...

6.6AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 10:21 p.m.•15 views

Malicious code in prime-one-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686403bdb86cae7a644dd5bb861eacb91b0437d25b0cf1c367e04ab8a411cebe The package prime-one-table was found to contain malicious code. Source: ghsa-malware 637ced514205a8512ba9f365d6f93fbcbd2d45e2144a5cc076c4d14187da317...

6.9AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 9:29 p.m.•13 views

Malicious code in tanstack-shadcn-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd82454ff234aa46b67b1813010ca3e7c45defc2172690c8c94fc74e2e09f6dc The package tanstack-shadcn-table was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/11/24 9:29 p.m.•33 views

EUVD-2025-199025

Malicious code in tanstack-shadcn-table npm...

6.6AI score
SaveExploits0References4
osv_mal
osv_mal
•added 2025/11/24 9:29 p.m.•21 views

MAL-2025-191018 Malicious code in tanstack-shadcn-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd82454ff234aa46b67b1813010ca3e7c45defc2172690c8c94fc74e2e09f6dc The package tanstack-shadcn-table was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/24 9:29 p.m.•5 views

Malware in tanstack-shadcn-table

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/11/24 6:31 p.m.•20 views

EUVD-2025-198805

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits1References3
Snyk
Snyk
•added 2025/11/24 4:24 p.m.•3 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2025/11/24 4:15 p.m.•17 views

CVE-2025-56401

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/11/24 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2025-0033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a lo...

6CVSS8AI score0.00211EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•24 views

PT-2025-47926

Name of the Vulnerable Software and Affected Versions ZIRA Group WBRM version 7.0 Description ZIRA Group WBRM version 7.0 is susceptible to a SQL Injection issue occurring in the referenceLookupsByTableNameAndColumnName function. The issue allows for potential manipulation of database queries...

7.6CVSS5.8AI score0.0027EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/11/24 12:00 a.m.•7 views

CVE-2025-56401

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName...

5.8AI score0.0027EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•18 views

PT-2026-4485

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the idpf driver related to RSS LUT initialization. Specifically, the RSS LUT is not initialized until an interface is active, leading to a NULL...

5.5CVSS5.6AI score0.00135EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•84 views

PT-2026-4493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the idpf driver related to RSS LUT handling after a soft reset. Specifically, a NULL pointer dereference can occur if an ethtool command accessing...

5.5CVSS5.8AI score0.00135EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/11/23 12:00 a.m.•19 views

WordPress plugin WP Shortcodes Plugin — Shortcodes Ultimate code issues and vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

6.4CVSS5.8AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/23 12:00 a.m.•20 views

PT-2025-47865

Name of the Vulnerable Software and Affected Versions WP Shortcodes Plugin – Shortcodes Ultimate versions prior to 7.4.6 Description The Shortcodes Ultimate plugin for WordPress is susceptible to Server-Side Request Forgery SSRF. This allows authenticated attackers with Administrator-level access...

6.4CVSS6AI score0.00198EPSS
SaveExploits0References9
Rows per page
Query Builder