EUVD-2023-51320

Malicious code in bioql PyPI...

EUVD-2024-20231

Malicious code in bioql PyPI...

EUVD-2025-26724

Malicious code in bioql PyPI...

EUVD-2025-7910

Malicious code in bioql PyPI...

EUVD-2024-37071

Malicious code in bioql PyPI...

EUVD-2024-29967

Malicious code in bioql PyPI...

MAL-2025-47675 Malicious code in google-profanity-words (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in google-profanity-words (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2016-4768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause ...

CVE-2025-57263

An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel...

False Sense of Security: Why Probing-Based Malicious Input Detection Fails to Generalize

Large Language Models LLMs can comply with harmful instructions, raising serious safety concerns despite their impressive capabilities. Recent work has leveraged probing-based approaches to study the separability of malicious and benign inputs in LLMs' internal representations, and researchers ha...

CVE-2025-57263

An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel...

VX Guestbook 安全漏洞

VX Guestbook is a guestbook program by the individual developer of VX Guestbook. A security vulnerability exists in VX Guestbook version 1.07, which originates from an SQL injection in the word parameter in the words.php admin panel, which could lead to malicious SQL payload injection...

Linux Distros Unpatched Vulnerability : CVE-2024-5206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fix...

gezi-core (>=0.0.0, <=0.0.2), meta-tags (0.0.0) potentially affected by unknown CVE via less-common-words (0.0.0)

less-common-words NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on less-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25174...

Malicious code in most-common-turkish-words (npm)

The package most-common-turkish-words was found to contain malicious code...

gezi-core (>=0.0.0, <=0.0.2), less-common-words (0.0.0) +1 more potentially affected by unknown CVE via most-common-words (2.0.0)

most-common-words NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on most-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - less-common-words 0.0.0 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-267...

MAL-2025-25174 Malicious code in less-common-words (npm)

The package less-common-words was found to contain malicious code...

Malicious code in test-mlw2-stars-words (npm)

The package test-mlw2-stars-words was found to contain malicious code...

MAL-2025-26737 Malicious code in most-common-words (npm)

The package most-common-words was found to contain malicious code...