237 matches found
CVE-2025-63638
Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting XSS in the "Task Title" and "Description Optional" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicki...
Malicious Package
Overview jira-ticket-todo-comment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in jira-ticket-todo-comment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f93f4caecf2a8d9f056f2b72cb51b1905579bf89bf8c1e994e68028c24d2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36808
Malicious code in jira-ticket-todo-comment npm...
MAL-2025-48863 Malicious code in productivity-suite-todo-lists-fragment (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in productivity-suite-todo-lists-fragment (npm)
--- -= Per source details. Do not edit below this line.=-...
cargo-kconfig (0.0.1), cli-todo (>=0.2.0, <=0.7.0) potentially affected by unknown CVE via ncurses (6.0.1)
ncurses CARGO version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - cargo-kconfig 0.0.1 - cli-todo =0.2.0, =0.7.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X77X-7MMH-CXV3...
EUVD-2015-3395
Malware in sbrugna...
EUVD-2024-43504
Malicious code in bioql PyPI...
EUVD-2021-28050
Malicious code in bioql PyPI...
EUVD-2025-27599
Malicious code in bioql PyPI...
EUVD-2025-1563
Malicious code in bioql PyPI...
EUVD-2023-36479
Malicious code in bioql PyPI...
EUVD-2024-27877
Malicious code in bioql PyPI...
EUVD-2024-27876
Malicious code in bioql PyPI...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-10117
A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input can lead to cross site scripting. The attack can be executed remotely. The exploit has be...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
CVE-2025-50892: Improper Privilege Management
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...