MAL-2025-3674 Malicious code in @joshcyber123/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d770dd15cd82921c4fed3497ee3c3b6e58515c20307d8c8aa3f34b72a5e7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pretty-cli-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...

MAL-2025-191816 Malicious code in pretty-cli-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...

CVE-2025-39456

Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Logger: from n/a through = 2.2...

Malicious code in sincpro-logger (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3470 Malicious code in sincpro-logger (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-39456

Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Logger: from n/a through = 2.2...

WordPress plugin WP Logger has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2025-39456: Missing Authorization

Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Logger: from n/a through = 2.2...

PT-2025-17015 · Unknown · Itron Wp Logger

Name of the Vulnerable Software and Affected Versions: iTRON WP Logger versions prior to 2.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions prior to 2.2, updat...

CVE-2025-32382

Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection details in Metabase either updating a password or changing password to private key or vice versa, Metabase would not always purge older Snowflake connection details from the...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when the ConfigurationImpl logger is being set to debug level. An attacker can access sensitive broker properties by exploiting the verbose logging configuration. Workaround This...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to concurrent writes to a map by logger.go. An attacker can induce a read-write conflict and cause repeated restarts and then a panic by writing to multiple logs simultaneously. Remediation There is no fixed version f...

ChainMaker security vulnerabilities

chainMaker is a Go library in the Go open source. A security vulnerability exists in chainMaker versions prior to 2.4.0, which stems from logger.go mishandling concurrent writes to mappings, which can lead to read/write conflicts and crashes...

org.infinispan.kafka:infinispan-kafka (0.1), org.infinispan.server:infinispan-server-event-logger (9.1.0.final) +6 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.1.0.final)

org.infinispan:infinispan-query MAVEN version 9.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.kafka:infinispan-kafka 0.1 -...

org.infinispan.server:infinispan-server-event-logger (9.1.5.final), org.infinispan.server:infinispan-server-feature-pack (9.1.5.final) +5 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.1.5.final)

org.infinispan:infinispan-query MAVEN version 9.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.1.5.final -...

org.infinispan.server:infinispan-server-event-logger (9.1.0.cr1), org.infinispan.server:infinispan-server-feature-pack (9.1.0.cr1) +5 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.1.0.cr1)

org.infinispan:infinispan-query MAVEN version 9.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.1.0.cr1 -...

org.infinispan.server:infinispan-server-event-logger (9.1.0.beta1), org.infinispan.server:infinispan-server-feature-pack (9.1.0.beta1) +5 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.1.0.beta1)

org.infinispan:infinispan-query MAVEN version 9.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.1.0.beta1 -...

org.infinispan.kafka:infinispan-kafka (0.2), org.infinispan.server:infinispan-server-event-logger (9.2.3.final) +8 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.2.3.final)

org.infinispan:infinispan-query MAVEN version 9.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.kafka:infinispan-kafka 0.2 -...

org.infinispan.server:infinispan-server-event-logger (9.2.4.final), org.infinispan.server:infinispan-server-feature-pack (9.2.4.final) +7 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.2.4.final)

org.infinispan:infinispan-query MAVEN version 9.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.2.4.final -...