545 matches found
EUVD-2025-32642
Malicious code in karma-verbose-summary-reporter npm...
Malicious code in karma-verbose-summary-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddd0b5c7d33d7e6539290522eaffda37ebf1db1e6e23a08cdcc4042b785ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47994 Malicious code in karma-verbose-summary-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bddd0b5c7d33d7e6539290522eaffda37ebf1db1e6e23a08cdcc4042b785ee57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2005-0511
Malware in sbrugna...
EUVD-2008-4559
Malware in sbrugna...
EUVD-2017-18546
Malware in sbrugna...
EUVD-2008-4934
Malware in sbrugna...
EUVD-2019-2236
Malware in sbrugna...
EUVD-2018-3002
Malware in sbrugna...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libarchive (UTSA-2025-986114)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986114 advisory. listitemverbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact...
EUVD-2025-14986
Malicious code in bioql PyPI...
EUVD-2022-5089
Malicious code in bioql PyPI...
EUVD-2025-23635
Malicious code in bioql PyPI...
EUVD-2022-34963
Malicious code in bioql PyPI...
EUVD-2025-25269
Malicious code in bioql PyPI...
EUVD-2025-28390
Malicious code in bioql PyPI...
curl: AWS SigV4 Signature Disclosure via Verbose Logging in libcurl
Summary When libcurl is built with AWS SigV4 support, enabling verbose logging CURLOPTVERBOSE or --verbose causes the library to print both the string-to-sign and the final HMAC signature into logs. Because signatures remain valid for several minutes and are derived directly from AWS credentials,...
Security update for go-sendxmpp (moderate)
openSUSE Security Update: Security update for go-sendxmpp Announcement ID: openSUSE-SU-2025:0332-1 Rating: moderate References: 1241814 Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE: 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L Affected Products: openSUS...
CVE-2025-9229
Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages...
CVE-2025-9229
Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages...