228 matches found
EUVD-2021-28050
Malicious code in bioql PyPI...
EUVD-2025-1563
Malicious code in bioql PyPI...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-10117
A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input can lead to cross site scripting. The attack can be executed remotely. The exploit has be...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
EaseUs Todo Backup 安全漏洞
EaseUS Todo Backup is a free data backup software from EaseUS. A security vulnerability exists in EaseUs Todo Backup version 1.2.0.1 that stems from not properly validating I/O request permissions, which could result in the disclosure of sensitive information, denial of service, or local elevatio...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-50892
The CVE-2025-50892 entry concerns EaseUS Todo Backup 1.2.0.1, where the eudskacs.sys driver (version 20250328) fails to properly validate privileges for I/O requests (IRP_MJ_READ/IRP_MJ_WRITE) sent to its device object. This creates a local, low-privileged attacker capability to perform arbitrary...
PT-2025-37082
Name of the Vulnerable Software and Affected Versions: EaseUs Todo Backup version 1.2.0.1 Description: The eudskacs.sys driver version 20250328 fails to properly validate privileges for I/O requests IRP MJ READ/IRP MJ WRITE sent to its device object. This allows a local, low-privileged attacker t...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
Malicious code in flux-example-todo (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41565 Malicious code in flux-example-todo (npm)
--- -= Per source details. Do not edit below this line.=-...
Linux Distros Unpatched Vulnerability : CVE-2020-26412
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2...
Linux Distros Unpatched Vulnerability : CVE-2020-13346
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential...
Malicious code in ahmed88521n786-todo-list (npm)
The package ahmed88521n786-todo-list was found to contain malicious code...
ahmedraza-atm (>=2.0.0 <=2.0.3), cli-03-todo-list (=1.0.0) +3 more potentially affected by unknown CVE via chlak (=0.0.1-security)
chlak NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chlak and may be impacted: - ahmedraza-atm =2.0.0, =1.0.0, =1.0.0, =1.0.1 - todo-list-with-anila-waqar =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16991...
on-duty-js (=3.0.0), todo-app-23426 (=1.0.0) potentially affected by unknown CVE via chalkk (=0.0.1-security)
chalkk NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chalkk and may be impacted: - on-duty-js =3.0.0 - todo-app-23426 =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-16776...
@wcd/gqio.angular-element-starter-kit (=0.1.0), @wcd/gqio.angular-element-todo (=0.1.0) +1 more potentially affected by unknown CVE via platform-browser (=0.0.1-security)
platform-browser NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser and may be impacted: - @wcd/gqio.angular-element-starter-kit =0.1.0 - @wcd/gqio.angular-element-todo =0.1.0 - clinicaamandao =1.0.0 Source cve...
Malicious code in todo-bitpanda-client (npm)
The package todo-bitpanda-client was found to contain malicious code...