2202 matches found
Malicious code in iban-validator-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fff3da0c4ead2e4f938efa16ad1cea92e872789a3b012edfed68526898cce4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
arp-validator
arp-validator Herramienta de seguridad para detectar ataques de envenenamiento ARP Características Utiliza un enfoque más rápido en la detección de ataques de envenenamiento ARP en comparación con enfoques pasivos Detecta no solo la presencia de envenenamiento ARP sino también el mapeo IP-MAC...
ActiveMQ-CVE-2023-46604
Validador Seguro de CVE-2023-46604 para ActiveMQ Un validador de un solo archivo y no destructivo para Apache ActiveMQ CVE-2023-46604. Inicia su propio servidor de callback HTTP, genera XML de Spring específico para el objetivo en memoria, envía el paquete OpenWire manipulado, correlaciona los...
hibernate__hibernate-validator_CVE-2019-10219_6_0_18_Final_fixed
Hibernate Validator Versión: 6.0.18.Final - 25-10-2019 ¿Qué es? Esta es la implementación de referencia de JSR-380 - Bean Validation 2.0. Bean Validation define un modelo de metadatos y una API para JavaBean, así como la validación de métodos. La fuente de metadatos por defecto son las anotacione...
MAL-2026-17235 Malicious code in items-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e49b1abd7c566b17104c5a2823251df2ca253a0fa509d7c19db1c1942ad13d On require, index.js invokes initializeDaemon at top level, which uses spawn'node', lib/check-items.js, detached: true, stdio: 'ignore' followed by...
Malicious code in items-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e49b1abd7c566b17104c5a2823251df2ca253a0fa509d7c19db1c1942ad13d On require, index.js invokes initializeDaemon at top level, which uses spawn'node', lib/check-items.js, detached: true, stdio: 'ignore' followed by...
EUVD-2026-69250
jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types incomplete PolymorphicTypeValidator denylist...
CVE-2017-16995
漏洞描述 Ubuntu是一个以桌面应用为主的开源GNU/Linux操作系统，基于Debian GNU/Linux 。近期有白帽子爆出 ubuntu 的最新版本（Ubuntu 16.04）存在本地提权漏洞，漏洞编号为CVE-2017-16995。该漏洞存在于调用eBPF bpf2的Linux内核系统中，当用户提供恶意BPF程序使eBPF验证器模块产生计算错误，导致任意内存读写问题， 低权限用户可使用此漏洞获得管理权限。 该漏洞在老版本中已经得到修复，然而最新版本中仍然可被利用，官方暂未发布相关补丁，漏洞处于0day状态。 影响版本 Linux Kernel Version 4.14-4.4...
PHP Login System 2.0.1 - Cross-Site Scripting
msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL id: CVE-2023-38875 info...
CVE-2026-101087
Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs, but the denylist did not cover IPv6 transition ranges — specifically the 6to4 prefix 2002::/16 and the local-use IPv4/IPv6 translation prefix 64:ff9b:1::/48. Because...
hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final
Hibernate Validator Versión: 6.0.17.Final - 13-06-2019 ¿Qué es? Esta es la implementación de referencia de JSR-380 - Bean Validation 2.0. Bean Validation define un modelo de metadatos y una API para la validación de JavaBeans, así como la validación de métodos. La fuente de metadatos por defecto...
unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...
CVE-2026-100680
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...
EUVD-2026-87653
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...
CVE-2026-100680
Budibase versions prior to 3.45.0 are vulnerable to an arbitrary local file read vulnerability due to the failure to disable external JSON reference resolution in the OpenAPI/Swagger import validator . An authenticated user with builder access can submit OpenAPI specifications containing file:// ...
unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...
unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...
OESA-2026-4130 unbound security update
Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...
CVE-2026-0915-json-Patch.-V2.0
CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 Parche de Seguridad para Validador JSON Solución de nivel empresarial para CVE-2026-0915 - Protege contra el análisis JSON inseguro mediante una validación estricta de esquemas. 🚨 Aviso de seguridad Este parche corrige CVE-2026-0915 - una...