MAL-2025-43336 Malicious code in @zalastax/nolb-lion-lib-9 (npm)

The package @zalastax/nolb-lion-lib-9 was found to contain malicious code...

MAL-2025-43331 Malicious code in @zalastax/nolb-lion-lib-4 (npm)

The package @zalastax/nolb-lion-lib-4 was found to contain malicious code...

MAL-2025-43334 Malicious code in @zalastax/nolb-lion-lib-7 (npm)

The package @zalastax/nolb-lion-lib-7 was found to contain malicious code...

MAL-2025-43328 Malicious code in @zalastax/nolb-lion-lib-1 (npm)

The package @zalastax/nolb-lion-lib-1 was found to contain malicious code...

MAL-2025-43338 Malicious code in @zalastax/nolb-lion-lib-b (npm)

The package @zalastax/nolb-lion-lib-b was found to contain malicious code...

OESA-2025-2207 nodejs-form-data security update

A module to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications. Security Fixes: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program file...

PT-2025-35667

Name of the Vulnerable Software and Affected Versions: libaudiosaplus sec.so versions prior to SMR Apr-2023 Release 1 Description: An out-of-bounds write issue exists in the libaudiosaplus sec.so library. This can allow a local attacker to execute arbitrary code. Recommendations: Update...

Linux Distros Unpatched Vulnerability : CVE-2023-51796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/freverse.c:269:26 in...

MAL-2025-41574 Malicious code in int-lib-config (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2019-3689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including...

MAL-2025-41344 Malicious code in xpoc-ts-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6aabe2bdc2f87978954e778f491ee06641df1ca2ebdce2b151881f7b8c7c063 The OpenSSF Package Analysis project identified 'xpoc-ts-lib' @ 99.0....

Malicious code in examples-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 518ba4bb1adf28c3721d2c8ff48d014ef14b3672e262a2f6eaa8acbe3a8f0823 The OpenSSF Package Analysis project identified 'examples-lib' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41288 Malicious code in examples-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 518ba4bb1adf28c3721d2c8ff48d014ef14b3672e262a2f6eaa8acbe3a8f0823 The OpenSSF Package Analysis project identified 'examples-lib' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-38639: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnfacct: don't assume acct name is null-terminated BUG: KASAN: slab-out-of-bounds in .. lib/vsprintf.c:721 Read of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851 .. string+0x231/0x2b0 lib/vsprintf.c:721...

CVE-2025-7969

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...

CVE-2025-7969: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in markdown-it allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/renderer.mjs. This issue affects markdown-it: 14.1.0. NOTE: the Supplier does not conside...

Linux Distros Unpatched Vulnerability : CVE-2022-23547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...

CVE-2025-9096: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-9095: Improper Neutralization of Input During Web Page Generation

A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the library lib/rest/routes/users.js of the component REST Endpoint. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

Malicious code in aog-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 741266c7bad6d1e60680d0242b4f212454b09ca9647a683b5b314b262760943d The OpenSSF Package Analysis project identified 'aog-lib' @ 2.2.4 npm as malicious. It is considered malicious because: - The package communicat...