MAL-2025-41853 Malicious code in @espace-client-axafr/document-card (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41852 Malicious code in @espace-client-axafr/demat-contract (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41856 Malicious code in @espace-client-axafr/fetch-helper (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/block-advisor (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41847 Malicious code in @espace-client-axafr/contact-form (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/certificate-auto (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41845 Malicious code in @espace-client-axafr/configure-store (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41841 Malicious code in @espace-client-axafr/bonus-euro-plus (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/atp-digital (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41837 Malicious code in @espace-client-axafr/atp-digital (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41836 Malicious code in @espace-client-axafr/arret-travail (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/advisor (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in elasticsearch-8.x (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-7426

Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of...

CVE-2025-7426

The CVE-2025-7426 entry relates to MINOVA TTA, where the FTP credentials are exposed through the debug port 1604 on the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account and could enable data manipulation or extraction in automated processes (EDI/data integrat...

CVE-2025-7426 MINOVA TTA Information Disclosure and Credential Exposure

Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of...

PT-2025-34601 · Unknown · Minova Tta

Name of the Vulnerable Software and Affected Versions: MINOVA TTA version 11.17.0 Description: The MINOVA TTA service exposes authentication FTP credentials through debug port 1604, allowing unauthenticated remote access to active FTP accounts containing sensitive internal data and import...

PT-2025-34546 · Ibm · Integrated Analytics System

Name of the Vulnerable Software and Affected Versions: IBM Integrated Analytics System versions 1.0.0.0 through 1.0.30.0 Description: The software allows an authenticated user to upload files with dangerous types. If opened by another user, these files could lead to code execution. Recommendation...

MAL-2025-41346 Malicious code in @spdf/astrotheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5496f51f1a8ab6eec096478b8236db5a53653d13cf6b08c21f9fe3b2bce4b414 The OpenSSF Package Analysis project identified '@spdf/astrotheme' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41406 Malicious code in server_msg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c915f51661674b9cbfd2e897a3d15c0682ceb1ddd99b4b6b70e3d9eee48f1c3 Any computer that has this package installed or running should be considered...