EUVD-2025-202774

Malicious code in elf-stats-sugarplum-toolkit-176 npm...

Malicious code in elf-stats-sparkly-toolkit-821 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997629d6ea65a954ad3c1bd4cb4f52757510da21531cf34acd2d6ee67971ec6c The package elf-stats-sparkly-toolkit-821 was found to contain malicious code...

EUVD-2025-202777

Malicious code in elf-stats-sparkly-toolkit-821 npm...

Malicious code in elf-stats-sugarplum-toolkit-176 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b262e6aa5320c23fa0220f81850b84e2bda91e747192ba16f4d9c5b3f17cc9 The package elf-stats-sugarplum-toolkit-176 was found to contain malicious code...

MAL-2025-192532 Malicious code in elf-stats-sparkly-toolkit-821 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997629d6ea65a954ad3c1bd4cb4f52757510da21531cf34acd2d6ee67971ec6c The package elf-stats-sparkly-toolkit-821 was found to contain malicious code...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Exploitation Tool A comprehensive security res...

Malicious code in elf-stats-snowy-toolkit-186 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a7ca12612653aaf7b01c778d65725cf59436f0da1a2e2c1ef371bd5296a23 The package elf-stats-snowy-toolkit-186 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-202913

Malicious code in elf-stats-snowy-toolkit-186 npm...

MAL-2025-192447 Malicious code in elf-stats-snowy-toolkit-186 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a7ca12612653aaf7b01c778d65725cf59436f0da1a2e2c1ef371bd5296a23 The package elf-stats-snowy-toolkit-186 was found to contain malicious code. Source: ghsa-malware...

Arbitrary File Read via Absolute Path Input in nltk.util.filestring() enabling Local & Remote File Disclosure

Description The function filestring in nltk.util treats a given string as a filesystem path and directly opens it without validation or sandboxing: def filestringf: if hasattrf, "read": return f.read elif isinstancef, str: with openf as infile: ← Direct unsanitized file access return infile.read...

EUVD-2025-201928

A vulnerability has been identified in COMOS V10.6 All versions, COMOS V10.6 All versions, JT Bi-Directional Translator for STEP All versions, NX V2412 All versions V2412.8900 with Cloud Entitlement bundled as NX X, NX V2506 All versions V2506.6000 with Cloud Entitlement bundled as NX X, Simcente...

GHSA-5J8P-438X-RGG5 SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475

Summary There is a critical vulnerability on xmlseclibs CVE-2025-66475, a dependency of php-saml Update to the following versions of php-saml which forces the use of patched versions of xmlseclibs: - 2.21.1 - 3.8.1 - 4.3.1 Impact Signature Wrapping Vulnerabilities allows an attacker to impersonat...

Exploit for Deserialization of Untrusted Data in Facebook React

⚡ CVE-2025-55182 – Auto Exploit Toolkit Precision Engine...

Siemens Advanced Licensing (SALT) Toolkit

SUMMARY Multiple Siemens products are affected by improper certificate validation in Siemens Advanced Licensing SALT Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for several affected products and recommends...

Ruby SAML 数据伪造问题漏洞

Ruby SAML is a SAML-Toolkits open source implementation of a SAML authorization client. Ruby SAML 1.12.4 and prior versions suffer from a Data Forgery Issue vulnerability that stems from a flaw in the libxml2 normalization process that could lead to authentication bypass...

The vulnerability of the asn1.validate() function in the Forge/lib/asn1.js set of cryptographic tools and tools for developing web applications allows a perpetrator to circumvent security restrictions.

The vulnerability of the asn1.validate function in the Forge/lib/asn1.js set of cryptographic tools and tools for developing web applications is related to the occurrence of interpretation conflicts when processing data based on the ASN.1 standard. Exploiting this vulnerability could allow an...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Hunter AWS Organization-Wide Detection Toolkit...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Exploit Toolkit React Server Components Pre-Au...

OmniSafeBench-MM: A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack-Defense Evaluation

Recent advances in multi-modal large language models MLLMs have enabled unified perception-reasoning capabilities, yet these systems remain highly vulnerable to jailbreak attacks that bypass safety alignment and induce harmful behaviors. Existing benchmarks such as JailBreakV-28K, MM-SafetyBench,...

MAL-2025-192338 Malicious code in elf-stats-shimmering-toolkit-483 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa849828ae330627573a02a9cfec420e470cf5dcfa587e0080e3db4105f31ad2 The package elf-stats-shimmering-toolkit-483 was found to contain malicious code...