4544 matches found
MAL-2025-2570 Malicious code in cmft-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7480b4348d595d2f3e0c25957e99041d6301f7e51593c0334345c1cdfe2a080c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GPT Academic 安全漏洞
GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. A server-side request forgery vulnerability exists in the GPT Academic crazyutils.getfilesfromeverything function, which can be exploited by an attacker to cause unauthorized access to...
Malicious code in sol-web3-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1af6c83b64b9da58a5d027de1d8039b58b1be78be7f8a3f9df554d15d8c15cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cortex-app-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9950da8284056147d327094840e63fdfc2c18e870e14dc7dc8b260e9dc80ab1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2500 Malicious code in cortex-app-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9950da8284056147d327094840e63fdfc2c18e870e14dc7dc8b260e9dc80ab1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
powerpc-utils bug fix and enhancement update
An update is available for powerpc-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...
gfs2-utils bug fix and enhancement update
An update is available for gfs2-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...
alsa-utils bug fix and enhancement update
An update is available for alsa-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...
perl-Scalar-List-Utils bug fix and enhancement update
An update is available for perl-Scalar-List-Utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...
shadow-utils bug fix update
An update is available for shadow-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The shadow-utils packages include programs for converting UNIX password...
nfs-utils bug fix and enhancement update
An update is available for nfs-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....
CVE-2024-28607
The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via a falsy isPrivate return value...
@boxyhq/saml-jackson (>=1.11.2 <=1.40.2), @boxyhq/saml20 (>=1.2.4 <=1.8.0) +8 more potentially affected by CVE-2025-29775 via xml-crypto (>=4.1.0 <=6.0.0)
xml-crypto NPM version =4.1.0, =1.11.2, =1.2.4, =1.0.0, =4.0.0, =1.0.0, =0.0.1, =0.0.2 - saml-nofs =3.0.2 - verifactu-utils =1.1.0 Source cves: CVE-2025-29775 Source advisory: OSV:GHSA-X3M8-899R-F7C3...
MAL-2025-2311 Malicious code in events-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab45d10dfa09f0ea69e25ef62c978634d9b929402d3875a2687180c005723eca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in events-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab45d10dfa09f0ea69e25ef62c978634d9b929402d3875a2687180c005723eca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-11071 · Google · Android
Name of the Vulnerable Software and Affected Versions: versions prior to the fixed version affected versions not specified Description: A use-after-free issue exists in the rfc check send cmd function within rfc utils.cc. This could lead to remote code execution without requiring additional...
CVE-2024-28607
The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via a falsy isPrivate return value...
CVE-2024-28607
The ip-utils package through 2.4.0 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via a falsy isPrivate return value...
CVE-2024-28607
CVE-2024-28607 affects the ip-utils package for Node.js up to version 2.4.0. The root cause is a faulty isPrivate check that can misclassify certain IPs (e.g., 0x7f.1) as globally routable, enabling SSRF. Documented impacts are SSRF risk; no explicit remediation or patch/version guidance is prese...
