2103 matches found
EUVD-2023-30900
Malicious code in bioql PyPI...
EUVD-2023-30901
Malicious code in bioql PyPI...
EUVD-2024-32402
Malicious code in bioql PyPI...
EUVD-2025-1966
Malicious code in bioql PyPI...
EUVD-2023-35964
Malicious code in bioql PyPI...
EUVD-2023-34723
Malicious code in bioql PyPI...
EUVD-2023-50552
Malicious code in bioql PyPI...
EUVD-2025-29631
Malicious code in bioql PyPI...
EUVD-2025-28017
Malicious code in bioql PyPI...
EUVD-2025-21918
Malicious code in bioql PyPI...
EUVD-2023-3103
Malicious code in bioql PyPI...
EUVD-2024-1586
Malicious code in bioql PyPI...
EUVD-2023-50551
Malicious code in bioql PyPI...
EUVD-2025-23050
Malicious code in bioql PyPI...
CVE-2025-61595 MANTRA tx gas limit is not enforced in send hooks
MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract,...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the send hooks. An attacker can exhaust system resources by triggering excessive gas consumption through recursive calls in the wasm contract. Remediation There is no fixed versio...
PT-2025-40058
Name of the Vulnerable Software and Affected Versions MANTRA versions prior to 4.0.2 Description The software does not enforce transaction gas limits within its send hooks. This allows send hooks to consume more gas than available in the transaction, and recursive calls within the WebAssembly Was...
Google Chromium V8 Type Confusion Vulnerability
Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine...
CVE-2025-58749
WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first operand memory address...
Untrusted Pointer Dereference
Overview Affected versions of this package are vulnerable to Untrusted Pointer Dereference in the memory.fill process when the first operand memory address pointer is greater than or equal to 2147483648 bytes in LLVM-JIT mode. An attacker can cause the runtime to hang or crash by executing a...