EUVD-2025-39946

Malicious code in dewi-rujaksoto45-breki npm...

EUVD-2025-41678

Malicious code in andi-semur44-breki npm...

EUVD-2025-41534

Malicious code in budi-empal24-ruro npm...

编号撤回

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2025.3.104432, which...

Important: xmlunit

Issue Overview: XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet used for an XSLT transformation, because XSLT extension functions are enabled. CVE-2024-31573 Affected Packages: xmlunit Issue Correction: Run dnf update xmlunit...

PT-2025-46139

Name of the Vulnerable Software and Affected Versions Malware Remover versions prior to 6.6.8.20251023 Description Improper control of code generation allows remote attackers to perform code injection, leading to remote code execution and the ability to bypass protection mechanisms. Recommendatio...

Critical: lasso

Issue Overview: A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability. CVE-2025-4640...

PT-2025-46169

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager versions prior to 2.1.2.12 Description Dell Display and Peripheral Manager contains an Execution with Unnecessary Privileges issue in the Installer. A local attacker with low privileges could potentially...

Dell Command Monitor Elevation of Privilege Vulnerability

Dell Command Monitor is a software from Dell USA that manages Dell's enterprise client systems. An elevation of privilege vulnerability exists in Dell Command Monitor, which can be exploited by an attacker to cause an elevation of privilege...

Hundred Plus EIP Plus 代码问题漏洞

Hundred Plus EIP Plus is an enterprise management software from Hundred Plus Ares Hundred Plus of Taiwan, China. Hundred Plus EIP Plus suffers from a code issue vulnerability that originates from allowing a privileged remote attacker to upload and execute a web backdoor that could lead to the...

PT-2025-46143

Name of the Vulnerable Software and Affected Versions HBS 3 Hybrid Backup Sync versions prior to 26.2.0.938 Description An external control of file name or path issue exists in HBS 3 Hybrid Backup Sync. An attacker with local network access can potentially read or modify files and directories...

Bugsink 安全漏洞

Bugsink is a self-hosted bug tracking software from Bugsink Open Source. A security vulnerability exists in Bugsink versions prior to 2.0.6, which stems from a specially crafted Brotli compressed envelope that may lead to excessive CPU time consumption, possibly resulting in a denial of service...

PT-2025-46157

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description A missing VCS URL validation in JetBrains YouTrack allows delegation to unauthorized repositories through the Junie widget. This issue affects versions prior to 2025.3.104432...

CGA-2G8X-CG8G-3GG7

Bulletin has no description...

CGA-JG85-XH46-VWCC

Bulletin has no description...

CGA-GG43-JXR9-VV34

Bulletin has no description...

Malicious code in yuni-moci49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292cf1abfa51cf35919d40cb9b4835314c2e5eb6e2abffe204a6e137d9a8599e The package yuni-moci49-breki was found to contain malicious code...

MAL-2025-49644 Malicious code in yanti-kue84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d98b7d7fd7bc30fd90423091df619442a654caf1999a1d1ee1af18198249541 The package yanti-kue84-ruro was found to contain malicious code...

MAL-2025-49593 Malicious code in xaver-liwet82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bf92671df9bd7aa3a5ac44e1ca4dd4c66aae96bbc7f428c29b015e253d8726 The package xaver-liwet82-sluey was found to contain malicious code...

MAL-2025-49581 Malicious code in xaver-bubur81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931901a9d78c8057a51b9848e02f669aa8c0bd1302541fe62469dfabc9fa6934 The package xaver-bubur81-ruro was found to contain malicious code...