5955 matches found
Use of Incorrectly-Resolved Name or Reference
Overview org.webjars.npm:hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the getPath function in the utils/url.ts file. An attacker can gain unauthorized access to protected endpoints by sending...
MAL-2025-47755 Malicious code in data-processing-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f5c7542831f6f9fe72a65e436b1f85c10261aac12ceae6f1bcc490afad6d1aaa Installing packages exfiltrates data different in different packages and versions or run revshells --- Category: MALICIOUS - The campaign has clearly malicious...
CVE-2025-9796 thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting
A vulnerability was found in thinkgem JeeSite up to 5.12.1. This affects the function decodeUrl2 of the file common/src/main/java/com/jeesite/common/codec/EncodeUtils.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made...
Malicious code in react-native-wm-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 790e08de4e57c51f573e613b7cdd780343c4f14a00aadaff30e05fca9cb69f8b Any computer that has this package installed or running should be considered...
MAL-2025-45766 Malicious code in react-native-wm-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 790e08de4e57c51f573e613b7cdd780343c4f14a00aadaff30e05fca9cb69f8b Any computer that has this package installed or running should be considered...
Malicious code in internal-helper-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Thinkgem JeeSite 安全漏洞
Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform of China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...
Linux Distros Unpatched Vulnerability : CVE-2025-52968
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to,...
MAL-2025-41965 Malicious code in d360-test-utils (npm)
The package d360-test-utils was found to contain malicious code...
MAL-2025-42085 Malicious code in solidity-utils-docify (npm)
The package solidity-utils-docify was found to contain malicious code...
Malicious code in d360-test-utils (npm)
The package d360-test-utils was found to contain malicious code...
CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...
CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...
ROS-20250829-01
A vulnerability in the mount.cifs.c component of the CIFS network file system mount utility package cifs-utils of the Linux operating system is related to writing beyond buffer boundaries in memory. Exploitation exploitation of the vulnerability could allow an attacker to escalate his privileges...
CVE-2025-9650: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...
Malicious code in @rbapp/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41933 Malicious code in @rbapp/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @rbacore/utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...