8416 matches found
MAL-2025-44054 Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)
The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...
MAL-2025-44051 Malicious code in dotenv-parse-variables-cluster-mongoose-xanthus (npm)
The package dotenv-parse-variables-cluster-mongoose-xanthus was found to contain malicious code...
MAL-2025-44463 Malicious code in gravitationalwave-corvus-dotenv-parse-variables-xo (npm)
The package gravitationalwave-corvus-dotenv-parse-variables-xo was found to contain malicious code...
Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)
The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code...
Malicious code in dotenv-parse-variables-norma-andromeda-testcafe (npm)
The package dotenv-parse-variables-norma-andromeda-testcafe was found to contain malicious code...
Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm)
The package kuiperbelt-miranda-dotenv-parse-variables-radiant was found to contain malicious code...
MAL-2025-44052 Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm)
The package dotenv-parse-variables-mira-nova-ophiuchus was found to contain malicious code...
MAL-2025-44055 Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)
The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code...
Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm)
The package dotenv-parse-variables-typeorm-spectron-fusion was found to contain malicious code...
Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm)
The package dotenv-parse-variables-mira-nova-ophiuchus was found to contain malicious code...
Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)
The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...
Malicious code in cygnus-dotenv-parse-variables-pm2-sequelize (npm)
The package cygnus-dotenv-parse-variables-pm2-sequelize was found to contain malicious code...
Malicious code in meteor-dotenv-parse-variables-callback-kaus (npm)
The package meteor-dotenv-parse-variables-callback-kaus was found to contain malicious code...
MAL-2025-44929 Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm)
The package kuiperbelt-miranda-dotenv-parse-variables-radiant was found to contain malicious code...
MAL-2025-45181 Malicious code in meteor-dotenv-parse-variables-callback-kaus (npm)
The package meteor-dotenv-parse-variables-callback-kaus was found to contain malicious code...
QEMU 安全漏洞
QEMU Quick Emulator is a suite of simulation processor software by Fabrice Bellard, an individual developer in France. The software is fast and cross-platform. QEMU suffers from a security vulnerability that stems from the fact that an attacker can bypass access restrictions via uefi-vars, which...
Linux Distros Unpatched Vulnerability : CVE-2025-24959
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env...
Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.15 Images Update
New images are available for Red Hat build of Keycloak 26.0.15 and Red Hat build of Keycloak 26.0.15 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...
org.keycloak/keycloak-model-storage-service: Variable injection into environment variables
A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...
org.keycloak/keycloak-model-storage-service: Variable injection into environment variables
A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...