242 matches found
EUVD-2016-0774
Malware in sbrugna...
EUVD-2016-10225
Malware in sbrugna...
EUVD-2019-19156
Malware in sbrugna...
EUVD-2006-0113
Malware in sbrugna...
EUVD-2010-4553
Malware in sbrugna...
EUVD-2023-2606
Malicious code in bioql PyPI...
EUVD-2023-53945
Malicious code in bioql PyPI...
EUVD-2022-38836
Malicious code in bioql PyPI...
EUVD-2024-43938
Malicious code in bioql PyPI...
EUVD-2023-40667
Malicious code in bioql PyPI...
EUVD-2023-2309
Malicious code in bioql PyPI...
EUVD-2022-0203
Malicious code in bioql PyPI...
Google Chrome < 139.0.7258.138 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 139.0.7258.138. It is, therefore, affected by a vulnerability as referenced in the 202508stable-channel-update-for-desktop19 advisory. - Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remot...
CVE-2025-54072 yt-dlp allows `--exec` command injection when using placeholder on Windows
yt-dlp is a feature-rich command-line audio/video downloader. In versions 2025.06.25 and below, when the --exec option is used on Windows with the default placeholder or , insufficient sanitization is applied to the expanded filepath, allowing for remote code execution. This is a bypass of the...
BIT-NODE-2025-27210
An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. This vulnerability affects Windows users of path.join API...
CVE-2025-27210
An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. This vulnerability affects Windows users of path.join API...
CVE-2025-27210
Node.js on Windows is affected by a path.join handling vulnerability affecting drive names (CON, PRN, AUX). CVE-2025-27210 notes an incomplete fix for CVE-2025-23084, indicating Windows device-name handling was not treated as special, causing a path that should be relative to be interpreted with ...
CVE-2025-2425 TOCTOU race condition vulnerability in ESET products on Windows
Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system...
CVE-2025-2425
CVE-2025-2425 describes a TOCTOU race condition in ESET security software on Windows that could let an attacker clear the content of an arbitrary file via the installed product. The flaw is rooted in a time-check vs. time-use mismatch within ESET components, enabling a local attacker with low pri...
