10116 matches found
Malicious code in fitbit-widget-dropdown (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-1013 Malicious code in apple-sdk (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...
CERTFR-2025-ACT-005
creationtimestamp| type| source ---|---|--- 2025-02-03 16:13:24+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lhbwpyxgkh2e 2025-02-03 16:15:16+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/113940844708523152 2025-02-03 16:15:16+00:00| seen|...
PT-2025-2450 · Enflick · Textnow
Name of the Vulnerable Software and Affected Versions: TextNow: Call + Text Unlimited version 24.17.0.2 Description: The issue allows any installed application, without requiring permissions, to place phone calls without user interaction. This is achieved by sending a crafted intent via the...
ASB-A-305695605
In multiple locations, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-352542820
In onCreateOptionsMenu of UserSettings.java, there is a possible way to remove the work profile by opening a hidden activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
ASB-A-354682735
In InputMethodSubtypeArray of InputMethodSubtypeArray.java, there is a possible way to bypass a key intent check to launch arbitrary activity due to Parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2024-13112
creationtimestamp| type| source ---|---|--- 2025-01-31 06:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwy327l2b 2025-01-31 06:19:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113921514093808163 2025-01-31 07:24:20+00:00| seen|...
Malicious code in tittottit (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in skulldentist (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-733 Malicious code in finfonfon (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-705 Malicious code in css-blocks-monorepo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd8788a6de395289af00ce5d63b51a4609d89ea09f2bf3eb36af0e27234e0fb1 Any computer that has this package installed or running should be considered...
Malicious code in unitedrabbits (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in testingthesand (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-727 Malicious code in @wongapl/offer-digest (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in prajwal_kewat-test-package (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in jqtools-overlay (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in gitgotgottten (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-713 Malicious code in overture2osmjs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4757db7655e3de9ca7fa7343ca0d8cd59c899c46454ca659ff07261b884f64db Any computer that has this package installed or running should be considered...