MAL-2025-34668 Malicious code in telesto-dotenv-install-cordelia (npm)

The package telesto-dotenv-install-cordelia was found to contain malicious code...

MAL-2025-18840 Malicious code in drupal-bower-install (npm)

The package drupal-bower-install was found to contain malicious code...

MAL-2025-29168 Malicious code in photon-astro-install-singularity (npm)

The package photon-astro-install-singularity was found to contain malicious code...

Malicious code in telesto-dotenv-install-cordelia (npm)

The package telesto-dotenv-install-cordelia was found to contain malicious code...

Malicious code in terraforming-install-proxima-meteor (npm)

The package terraforming-install-proxima-meteor was found to contain malicious code...

Malicious code in photon-astro-install-singularity (npm)

The package photon-astro-install-singularity was found to contain malicious code...

Malicious code in only-test-not-install (npm)

The package only-test-not-install was found to contain malicious code...

Malicious code in babel-npm-install (npm)

The package babel-npm-install was found to contain malicious code...

kik (>=0.0.0, <=1.3.0), kik-starter (2.2.0) potentially affected by unknown CVE via install-module (>=0.2.0, <=1.1.0)

install-module NPM version =0.2.0, =0.0.0, =1.3.0 - kik-starter 2.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23249...

MAL-2025-25410 Malicious code in lint-staged-install-bellatrix-geodynamo (npm)

The package lint-staged-install-bellatrix-geodynamo was found to contain malicious code...

MAL-2025-21257 Malicious code in gemini-install-server-radioastronomy (npm)

The package gemini-install-server-radioastronomy was found to contain malicious code...

MAL-2025-25806 Malicious code in malicious-do-not-install (npm)

The package malicious-do-not-install was found to contain malicious code...

CVE-2025-3892

ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

Dell SupportAssist for Business PCs 安全漏洞

DELL SupportAssist for Business PCs is Dell's PC management solution for enterprise users, helping companies improve IT management efficiency and reduce O&M costs through AI-driven automated support, remote deployment and centralized control capabilities. An elevation of privilege vulnerability...

CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

CVE-2025-8916

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...

CVE-2025-8891

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to missing or incorrect nonce validation on the oceanwpnoticebuttonclick function. This makes it possible for unauthenticated attackers to install the Ocean Extra plugin via a forge...

CVE-2025-8891

CVE-2025-8891 relates to the OceanWP WordPress theme. The affected versions are 4.0.9 through 4.1.1, where a Cross-Site Request Forgery can be exploited due to missing/incorrect nonce validation in the oceanwp_notice_button_click() function. This enables unauthenticated attackers to cause the ins...

2025-08 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5063709)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2025-08 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5063877)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...