10969 matches found
CVE-2025-20923
Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...
CVE-2025-20923
Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...
Malicious code in opstooling-js-style (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b11b3f4ae62b5020e45db0bb5c8c20d6e3ed369a002264afcac1d2ab34476fd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-41613
creationtimestamp| type| source ---|---|--- 2025-03-06 02:17:23+00:00| seen| Telegram/xGi9zBrNoLO9QDKDGLVcQXonIX5gNWe3gepahfOL0wSQ4xdv...
PT-2025-9894
Name of the Vulnerable Software and Affected Versions Galaxy Wearable versions prior to 2.2.61.24112961 Description The issue is related to improper access control, allowing local attackers to launch arbitrary activity with Galaxy Wearable privilege. Recommendations For versions prior to...
CVE-2025-20923: Undefined Security Weakness
Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...
Malicious code in certifications (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7d51c9defecdd382c5048eb6f92b32558355b8457b2b5cd63f3d86e12e8ed35b Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...
MAL-2025-2151 Malicious code in dexter-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af68f212ffdb2522ba261549728dc70fe8cb18c52beaed06290818706c688606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in migrate-npm-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e88d87096c208b4f54619b9977a873f533856db5cc436e42261a8e9254e162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in adminauthserv-paypal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01fbeb3da8a3ec0a1c93f3ff5431e6be6693f2a2e13482834637f2b73e99d13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in connector123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4261abe09f2e4b03b147c1ead2f47890e02c3a6566f7b8d5feec8ead8c00737a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2069 Malicious code in connector-colaborator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b36fb73f95f45f84f970f686c6e99ac696443d4011ed8949a09ba012e27336 The OpenSSF Package Analysis project identified 'connector-colaborator' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
WordPress WP Activity Log plugin <= 5.3.2 - Authenticated (Admin+) PHP Object Injection vulnerability
Authenticated Admin+ PHP Object Injection vulnerability discovered by Andres Roldan in WordPress Plugin WP Activity Log versions = 5.3.2...
Linux Distros Unpatched Vulnerability : CVE-2019-11718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without...
Malicious code in orchestration-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446d1cd4d99a7dc69f63cc5747ff882ba95bd3db160f5d500fe1711be4897d7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2021 Malicious code in orchestration-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446d1cd4d99a7dc69f63cc5747ff882ba95bd3db160f5d500fe1711be4897d7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2015 Malicious code in timify-packager (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 440654aa8c74a2e41a533db2f19a6979cd5863485d40295a5d007fec08638c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2018-8639
creationtimestamp| type| source ---|---|--- 2025-03-03 15:58:10+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/3472167 2025-03-03 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-03-03 19:03:10+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3ljinbdwlgm23...
MAL-2025-1681 Malicious code in eslint7_0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 980ef05ca84d0e674a2d52e61c74f39eaf4c01034af1ad5ef04caf3f1d057bdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...