Lucene search
+L

42357 matches found

Snyk
Snyk
added 2026/07/25 12:44 p.m.11 views

Malicious Package

Overview -john-wick-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, the...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.11 views

Malicious Package

Overview -john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena-espanol is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization,...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.12 views

Malicious Package

Overview -whareo-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-home is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.12 views

Malicious Package

Overview -john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-tarabi-lliena- is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization,...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.11 views

Malicious Package

Overview -whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-index-main is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.13 views

Malicious Package

Overview -john-wick-4-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization,...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.12 views

Malicious Package

Overview -whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-123 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.14 views

Malicious Package

Overview -john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena- is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there ...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.13 views

Malicious Package

Overview -john-wick-4-keanu-reeves-pelicula-completa-h-d-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization,...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.10 views

Malicious Package

Overview -john-wick-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena- is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there i...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.13 views

Malicious Package

Overview -john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is n...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.10 views

Malicious Package

Overview -john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization,...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.12 views

Malicious Package

Overview -espanol-john-wick-keanu-4-k-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connecti...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.11 views

Malicious Package

Overview -accion-pelicula-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena- is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.14 views

Malicious Package

Overview -espanol-john-wick-keanu-reeves-4-k-varindo-en-casa-en-lienia-lliena-love is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/25 12:44 p.m.11 views

Malicious Package

Overview -accion-pelicula-john-wick-4-keanu-reeves-peliculas-completa-varindo-allah-varindo-en-casa-lliena- is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 11:48 p.m.12 views

Eval Injection

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Eval Injection via the main process in collocations.py when command-line arguments are passed directly to the eval function without proper...

8.5CVSS7.3AI score0.00184EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/07/24 10:39 p.m.15 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the defaultContentParameterDecoder function. An attacker can cause the application to crash or abort request processing by sending a crafted HTTP request that targets an OpenAPI operation with a content...

6.9CVSS5.4AI score0.00507EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:38 p.m.12 views

Arbitrary Argument Injection

Overview bedrock-agentcore is an An SDK for using Bedrock AgentCore Affected versions of this package are vulnerable to Arbitrary Argument Injection via the installpackages function. An attacker can execute arbitrary commands within the sandboxed environment by supplying specially crafted package...

8.4CVSS6.1AI score0.00327EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:37 p.m.14 views

Improper Validation of Specified Quantity in Input

Overview libp2p is a libp2p: The Python implementation of the libp2p networking stack Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input through the handleincoming process. An attacker can cause the read loop to block indefinitely by sending a...

8.7CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:35 p.m.36 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the CombinedResourceInfo process. An attacker can cause excessive memory consumption and potentially exhaust server resources by submitting forged combined-resource IDs that inflate to large outputs and are...

8.7CVSS5.9AI score
SaveExploits0References5
Snyk
Snyk
added 2026/07/24 10:35 p.m.10 views

Inefficient Algorithmic Complexity

Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the flagProtection process. An attacker can cause significant resource exhaustion by submitting specially crafted large inputs, leading to degraded...

8.7CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:34 p.m.16 views

Improper Encoding or Escaping of Output

Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the escape or escapeAll process when used with the shell option set to Dash or when the default shell is Dash. An attacker can obtain the user's home...

6.3CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:34 p.m.14 views

Improper Neutralization

Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Improper Neutralization via the escape or escapeAll APIs when processing untrusted input containing parentheses on Windows systems configured to use CMD as the shell. An attacker can execute...

9.2CVSS6.1AI score
SaveExploits0References3
Snyk
Snyk
added 2026/07/24 10:33 p.m.15 views

Improper Neutralization

Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Improper Neutralization in the escape or escapeAll process when used with Zsh as the shell, especially if the Zsh options EXTENDEDGLOB or MAGICEQUALSUBST are enabled. An attacker can obtain...

6.3CVSS5.8AI score
SaveExploits0References3
Snyk
Snyk
added 2026/07/24 10:33 p.m.11 views

Non-exit on Failed Initialization

Overview awslabs.aws-api-mcp-server is a Model Context Protocol MCP server for interacting with AWS Affected versions of this package are vulnerable to Non-exit on Failed Initialization in the startup initialization process. An attacker can gain unauthorized access to restricted AWS API operation...

7.3CVSS5.9AI score0.00158EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:28 p.m.16 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the aggregation of incoming WebSocket message fragments without any limit on total size or fragment count. An attacker can exhaust server memory and cause a denial of service ...

8.7CVSS5.5AI score0.00346EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:28 p.m.26 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the aggregation of incoming WebSocket message fragments without any limit on total size or fragment count. An attacker can exhaust server memory and cause a denial of service ...

8.7CVSS5.4AI score0.00346EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:28 p.m.20 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the aggregation of incoming WebSocket message fragments without any limit on total size or fragment count. An attacker can exhaust server memory and cause a denial of service ...

8.7CVSS5.4AI score0.00346EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:28 p.m.13 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the aggregation of incoming WebSocket message fragments without any limit on total size or fragment count. An attacker can exhaust server memory and cause a denial of service ...

8.7CVSS5.4AI score0.00346EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:28 p.m.13 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the aggregation of incoming WebSocket message fragments without any limit on total size or fragment count. An attacker can exhaust server memory and cause a denial of service ...

8.7CVSS5.4AI score0.00346EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:28 p.m.13 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the aggregation of incoming WebSocket message fragments without any limit on total size or fragment count. An attacker can exhaust server memory and cause a denial of service ...

8.7CVSS5.5AI score0.00346EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.31 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the process that merges HTTP/1.1 chunked-body trailer fields into Request.headers. An attacker can inject arbitrary HTTP headers by sending specially crafted trailer fields, potentially bypassing header-based...

9.1CVSS5.9AI score0.00289EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.16 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the process that merges HTTP/1.1 chunked-body trailer fields into Request.headers. An attacker can inject arbitrary HTTP headers by sending specially crafted trailer fields, potentially bypassing header-based...

9.1CVSS5.9AI score0.00289EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.21 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the process that merges HTTP/1.1 chunked-body trailer fields into Request.headers. An attacker can inject arbitrary HTTP headers by sending specially crafted trailer fields, potentially bypassing header-based...

9.1CVSS5.9AI score0.00289EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.12 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the Java HTTP parser process. An attacker can bypass access controls, poison backend response queues, or manipulate cache contents by sending specially crafted HTTP/1.1 requests that exploit discrepancies in...

9.1CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.13 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the Java HTTP parser process. An attacker can bypass access controls, poison backend response queues, or manipulate cache contents by sending specially crafted HTTP/1.1 requests that exploit discrepancies in...

9.1CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.26 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the Java HTTP parser process. An attacker can bypass access controls, poison backend response queues, or manipulate cache contents by sending specially crafted HTTP/1.1 requests that exploit discrepancies in...

9.1CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.16 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the Java HTTP parser process. An attacker can bypass access controls, poison backend response queues, or manipulate cache contents by sending specially crafted HTTP/1.1 requests that exploit discrepancies in...

9.1CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.16 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the Java HTTP parser process. An attacker can bypass access controls, poison backend response queues, or manipulate cache contents by sending specially crafted HTTP/1.1 requests that exploit discrepancies in...

9.1CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 10:26 p.m.10 views

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the Java HTTP parser process. An attacker can bypass access controls, poison backend response queues, or manipulate cache contents by sending specially crafted HTTP/1.1 requests that exploit discrepancies in...

9.1CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 9:56 p.m.16 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the authentication process when handling OIDC subject identifiers due to the use of an accent-insensitive collation in the database. An attacker can gain unauthorized access to another user's account by...

8.6CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 9:55 p.m.13 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through improper validation of ownership in the editRecord process. An attacker can modify or overwrite DNS records in zones they do not own by manipulating the rid and zid parameters in ...

8.1CVSS5.9AI score
SaveExploits0References3
Snyk
Snyk
added 2026/07/24 9:54 p.m.14 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the updateUser process of the API endpoint, which fails to enforce proper authorization checks for editing superuser accounts and changing user passwords. An attacker can gain full administrative access by sendi...

8.8CVSS5.9AI score
SaveExploits0References3
Snyk
Snyk
added 2026/07/24 9:54 p.m.17 views

Authentication Bypass by Assumed-Immutable Data

Overview Affected versions of this package are vulnerable to Authentication Bypass by Assumed-Immutable Data in the password change process when the stored password remains at its default value and the submitted password is not verified. An attacker can gain unauthorized access and set a new...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 9:51 p.m.15 views

Use of Uninitialized Resource

Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource in the zlibdecomp function when processing a zlib stream that inflates to fewer bytes than the expected frame size. An attacker can access uninitialized heap memory contents by supplying a crafted zlib...

7.1CVSS5.4AI score0.00245EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 9:50 p.m.7 views

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview sm-crypto is a sm-crypto Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG through the generateKeyPairHex path in src/sm2/utils.js. An attacker can recover or predict SM2 private keys and signing nonces by causing a...

9.3CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 9:50 p.m.6 views

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview org.webjars.npm:sm-crypto is a sm-crypto Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG through the generateKeyPairHex path in src/sm2/utils.js. An attacker can recover or predict SM2 private keys and signing nonces b...

9.3CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 9:49 p.m.21 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the pngwritechunk process. An attacker can cause heap memory corruption, process crashes, or potentially achieve arbitrary code execution by supplying a crafted PNG image containing a malicious eXIf chunk...

8.8CVSS6.5AI score0.0052EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/24 9:49 p.m.15 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the macedecodeframe process. An attacker can corrupt heap memory and potentially execute arbitrary code by supplying a crafted CAF file with malicious bytesperpacket and framesperpacket values that...

8.8CVSS6.4AI score0.00311EPSS
SaveExploits0References2
Total number of security vulnerabilities42357