Lucene search
+L

200 matches found

OSV
OSV
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-9047 Malicious code in @malware-test-vapor-masty-zeros-matte/test-mlw3-vapor-masty-zeros-matte (npm)

The package @malware-test-vapor-masty-zeros-matte/test-mlw3-vapor-masty-zeros-matte was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•12 views

Malicious code in @malware-test-vapor-masty-zeros-matte/test-mlw3-vapor-masty-zeros-matte (npm)

The package @malware-test-vapor-masty-zeros-matte/test-mlw3-vapor-masty-zeros-matte was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•5 views

Malicious code in @malware-test-zeros-cheep-howes-ciggy/test-mlw3-zeros-cheep-howes-ciggy (npm)

The package @malware-test-zeros-cheep-howes-ciggy/test-mlw3-zeros-cheep-howes-ciggy was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/11 1:51 p.m.•9 views

BIT-LIBPYTHON-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS7.1AI score0.06882EPSS
SaveExploits1References18
RedHat Linux
RedHat Linux
•added 2025/07/07 1:35 p.m.•26 views

base-x: base-x homograph attack allows Unicode lookalike characters to bypass validation.

A flaw was found in base-x. This vulnerability allows attackers to generate addresses that appear legitimate, tricking users into sending money to them instead of the intended ones. The problem arises from the way base-x compresses leading zeros in addresses via manipulation of the base encoding...

8.7CVSS5.7AI score0.00445EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/07 1:32 p.m.•12 views

base-x: base-x homograph attack allows Unicode lookalike characters to bypass validation.

A flaw was found in base-x. This vulnerability allows attackers to generate addresses that appear legitimate, tricking users into sending money to them instead of the intended ones. The problem arises from the way base-x compresses leading zeros in addresses via manipulation of the base encoding...

8.7CVSS5.7AI score0.00445EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/07/07 1:27 p.m.•16 views

base-x: base-x homograph attack allows Unicode lookalike characters to bypass validation.

A flaw was found in base-x. This vulnerability allows attackers to generate addresses that appear legitimate, tricking users into sending money to them instead of the intended ones. The problem arises from the way base-x compresses leading zeros in addresses via manipulation of the base encoding...

8.7CVSS5.7AI score0.00445EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/06/29 1:20 p.m.•19 views

CVE-2025-40910

Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally usi...

6.5CVSS7.3AI score0.00335EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/27 1:15 p.m.•20 views

CVE-2025-40910

Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally usi...

6.5CVSS0.00335EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/06/27 12:19 p.m.•27 views

CVE-2025-40910 Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses

Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally usi...

0.00335EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/06/27 12:19 p.m.•13 views

CVE-2025-40910 Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses

Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally usi...

7.2AI score0.00335EPSS
SaveExploits0References5
CVE
CVE
•added 2025/06/27 12:19 p.m.•33 views

CVE-2025-40910

The Net::IP::LPM Perl module, specifically version 1.10 , is vulnerable to an access control bypass due to the improper handling of leading zero characters in IP CIDR address strings . Because leading zeros are used to indicate octal numbers, this behavior can confuse users relying on decimal not...

6.5CVSS6.6AI score0.00335EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/27 12:00 a.m.•3 views

CVE-2025-40910: Improper Validation of Specified Type of Input

Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally usi...

6.5CVSS5.8AI score0.00335EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/06/27 12:00 a.m.•16 views

Net::IP::LPM 安全漏洞

Net::IP::LPM is a Perl module by Tomas Podermanski, a personal developer, that implements the Longest Prefix Matching LPM algorithm. A security vulnerability exists in Net::IP::LPM version 1.10 that stems from not properly handling IP address leading zeros, which could lead to an access control...

6.5CVSS6.6AI score0.00335EPSS
SaveExploits0References3
NVD
NVD
•added 2025/05/27 10:15 p.m.•46 views

CVE-2025-40911

Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are...

6.5CVSS0.00366EPSS
SaveExploits0References3
OSV
OSV
•added 2025/05/27 10:15 p.m.•10 views

DEBIAN-CVE-2025-40911

Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are...

6.5CVSS5.4AI score0.00366EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/27 10:15 p.m.•12 views

UBUNTU-CVE-2025-40911

Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are...

6.5CVSS5.8AI score0.00366EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/05/27 9:17 p.m.•10 views

CVE-2025-40911 Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses

Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are...

6.9AI score0.00366EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/05/27 9:17 p.m.•42 views

CVE-2025-40911

Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are...

5.4AI score0.00366EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/27 12:00 a.m.•1 views

CVE-2025-40911: Improper Validation of Specified Type of Input

Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are...

6.5CVSS5.8AI score0.00366EPSS
SaveExploits0References1
Rows per page
Query Builder