2216 matches found
EUVD-2022-1127
Malicious code in bioql PyPI...
EUVD-2022-3110
Malicious code in bioql PyPI...
EUVD-2021-30548
Malicious code in bioql PyPI...
EUVD-2024-19664
Malicious code in bioql PyPI...
MAL-2025-47881 Malicious code in coder-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2ddf9a60ebc68bffd364ac4fda53541ff6d6967a0fc5344e4d082f207aa27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in coder-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2ddf9a60ebc68bffd364ac4fda53541ff6d6967a0fc5344e4d082f207aa27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview coder-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Integer Overflow lead to DOS in API `v2/models/<model-name>/infer`
This report is not public...
CVE-2023-53501
No public technical details about CVE-2023-53501 were found in the provided connected documents. The initial description mentions a Linux kernel fix for PASID refcount with no vendor/affected-version specifics or mitigations. Monitor for updates.
CVE-2025-56762
Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...
CVE-2025-56762
Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...
UBUNTU-CVE-2023-53364
In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with partial DT Two versions of the original patch were sent but V1 was merged instead of V2 due to a mistake. So update to V2. The advantage of V2 is that it completely avoids dereferenci...
CVE-2023-53364 regulator: da9063: better fix null deref with partial DT
In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with partial DT Two versions of the original patch were sent but V1 was merged instead of V2 due to a mistake. So update to V2. The advantage of V2 is that it completely avoids dereferenci...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2134)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/fpu: KVM: Set the base guest FPU uABI size to sizeofstruct kvmxsave.CVE-2022-49557 A cross-privilege Spectre v2 vulnerability allows attackers...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2144)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/fpu: KVM: Set the base guest FPU uABI size to sizeofstruct kvmxsave.CVE-2022-49557 A cross-privilege Spectre v2 vulnerability allows attackers...
Wago CODESYS V2 Web-Server Unchecked Return Value (CVE-2021-34585)
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation. This plugin only works with...
SUNRPC: fix a memleak in gss_import_v2_context
...
VulnCheck KEV: CVE-2023-50919
An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR30...
CVE-2025-9377
The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...
Linux Distros Unpatched Vulnerability : CVE-2022-1664
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal...