917 matches found
Malicious code in polymer-tresd-true (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c19c1e3cf61385a4183fd5ae406ea55113627fb0bd02e33e5bcfa3772dd44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-135585
Malicious code in thambi-rafa-true npm...
EUVD-2025-137414
Malicious code in polymer-tresd-true npm...
CVE-2025-64502
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....
CVE-2025-64507 Incus vulnerable to local privilege escalation through custom storage volumes
Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the security.shifted property set to true...
PT-2025-46820
Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions up to 9.9 Description pgAdmin 4 versions up to 9.9 on Windows systems are susceptible to a command injection issue. The root cause is the use of shell=True during backup and restore operations. This allows attackers to execu...
CVE-2025-64118
node-tar is a Tar for Node.js. In 7.5.1, using .t aka .list with sync: true to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2...
Race Condition
Overview tar is a full-featured Tar for Node.js. Affected versions of this package are vulnerable to Race Condition in the tar.t function, also known as tar.list, when the sync: true option is used and the underlying tar file is truncated on disk to a smaller size between the time its size is...
CVE-2025-12060
Removed by vendor...
AlmaLinux 10 : kernel (ALSA-2025:9896)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:9896 advisory. kernel: ice: Fix deinitializing VF in error path CVE-2025-21883 kernel: eth: bnxt: fix truesize for mb-xdp-pass case CVE-2025-21961 kernel: ibmvnic: Use...
EUVD-2021-19420
Malware in sbrugna...
EUVD-2021-19418
Malware in sbrugna...
EUVD-2021-19417
Malware in sbrugna...
EUVD-2020-7488
Malware in sbrugna...
EUVD-2020-2602
Malware in sbrugna...
EUVD-2018-18447
Malware in sbrugna...
EUVD-2020-30270
Malware in sbrugna...
EUVD-2020-30269
Malware in sbrugna...