CLEANSTART-2026-UM63521 Within HostnameError

Multiple security vulnerabilities affect the vertical-pod-autoscaler-fips package. Within HostnameError. See references for individual vulnerability details...

CVE-2025-23856

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Odyno Simple Vertical Timeline simple-vertical-timeline allows DOM-Based XSS.This issue affects Simple Vertical Timeline: from n/a through = 0.1...

CVE-2017-18826

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18837

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

CVE-2017-18830

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15,...

[SECURITY] Fedora 43 Update: python-pdfminer-20251230-1.fc43

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

Improper Access Control via Weak JWT Token Leads to Admin Takeover and Privilege Escalation

Description The application's session management is vulnerable to Authorization Bypass and Vertical Privilege Escalation. During dynamic analysis of the application's authentication flow, I discovered that the JSON Web Tokens JWT are signed with a weak secret key. This allowed me to perform an...

CVE-2023-53806

CVE-2023-53806 pertains to the Linux kernel and affects the DRM AMD display driver. The root cause is an out-of-bounds access when the driver populates subvp information for multiple pipes using vblank, which could trigger a page fault. The fix restricted subvp cmd info population to only the top...

MAL-2025-139097 Malicious code in vertical-crimson-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3c74559c3b3550fcaf2e322a771a25d136c04e8e12f1335706771da8036c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vertical-crimson-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3c74559c3b3550fcaf2e322a771a25d136c04e8e12f1335706771da8036c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117005

Malicious code in vertical-crimson-firefly npm...

EUVD-2025-100949

Malicious code in verticalpythonz3n npm...

EUVD-2025-94311

Malicious code in verticalboobyz3n npm...

MAL-2025-123989 Malicious code in vertical_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6027cb201b1d67e88887a6468ec03658614337404b3acab66397167b4faee78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88064

Malicious code in verticalbugz3n npm...

MAL-2025-110438 Malicious code in vertical_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b58ef088cd3761584c7b9383a2911712f40f743c05c8005c9c398f1c636ade9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80122

Malicious code in verticalmuskoxdumbs npm...

EUVD-2025-73040

Malicious code in verticalviperz3n npm...

EUVD-2025-65497

Malicious code in verticalgoosez3n npm...

MAL-2025-91757 Malicious code in vertical_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59053957a146caa7204d84c31797beb7e2dae2b84de10cbe2ee4fb645e570f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...