1815 matches found
EUVD-2025-198623
Malicious code in @validate-pubkey/hex npm...
Malicious Package
Overview @validate-pubkey/hex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @validate-pubkey/hex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05db2afe6b0d7557f2c2153dd15df68ab69667e8402bf92f2b2e2d900eb5728f The package @validate-pubkey/hex was found to contain malicious code. Source: ghsa-malware...
Exploit for Missing Authentication for Critical Function in Langflow
CVE-2025-3248: Langflow Unauthenticated RCE Vulnerability Scan...
CVE-2025-12528
CVE-2025-12528 concerns the Pie Forms for WP WordPress plugin (versions <= 1.6). The issue is an Arbitrary File Upload due to insufficient file-type validation: validate_classic checks extensions but does not stop the upload, enabling unauthenticated attackers to upload dangerous extensions (e...
CVE-2025-60694
A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...
EUVD-2025-175327
A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...
CVE-2025-60694
A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...
CVE-2025-60694
A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...
EUVD-2025-178827
Malicious code in function-bundle-log-validate-grid npm...
EUVD-2025-179052
Malicious code in error-validate-refactor-byte-lambda npm...
EUVD-2025-176140
Malicious code in sun-serialize-parse-validate-alert npm...
Malicious code in visualize-validate-array-hot-analyze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5405559277835b28bc4c8bb6db51998aa22c4fd91d1ef31c819a28799cc347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180101
Malicious code in beta-grep-cron-omega-validate npm...
EUVD-2025-179622
Malicious code in compile-validate-sandbox-node-async npm...
EUVD-2025-177177
Malicious code in pi-validate-water-test-tau npm...
Malicious code in theta-validate-meta-air-cat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d3e186b062df4165b4ff6124f4467a91df506dc840e45e44a67191212c48ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175701
Malicious code in visualize-validate-array-hot-analyze npm...