19445 matches found
CVE-2025-40096
creationtimestamp| type| source ---|---|--- 2025-10-30 11:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fum7keqp2q 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0396/ 2026-04-02 17:00:00+00:00| seen|...
CVE-2025-58188
creationtimestamp| type| source ---|---|--- 2025-10-30 04:41:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4f5ik5bwg26 2025-10-30 12:01:05+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3m4fw2igeja27 2025-10-30 14:04:15+00:00| seen|...
PT-2025-44530
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2011R1.9 Description Nagios XI versions prior to 2011R1.9 are susceptible to cross-site scripting XSS. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary...
CVE-2011-10039: Improper Neutralization of Input During Web Page Generation
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...
Nagios XI security vulnerabilities
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI CCM versions prior to 3.1.6 and Nagios XI version 5.8.8, which...
Nagios XI security vulnerabilities
Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2011R1.9 that stems from insufficient validatio...
EUVD-2025-36887
Malicious code in zustand.js npm...
EUVD-2025-36757
Malicious code in react-naming-convention npm...
EUVD-2025-36784
Malicious code in wdr-beam npm...
EUVD-2025-36796
Malicious code in @gitlab-test/bun-v1 npm...
Malicious Package
Overview airbnb-babel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-36824
Malicious code in durablefunctionsmonitor-vscodeext npm...
EUVD-2025-36826
Malicious code in xo-validation npm...
CVE-2025-35980
creationtimestamp| type| source ---|---|--- 2025-10-29 21:32:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4efinz6ha2k...
CVE-2025-62789 Wazuh vulnerable to NULL pointer dereference in fim_alert line 712
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fimalert implementation does not check whether the return value of ctimer is NULL or not before calling strdup on it. A compromised agent can cause a crash of analysisd by sending a...
CVE-2025-62789
CVE-2025-62789 affects Wazuh before 4.11.0. The fim_alert() path does not check the return value of ctime_r before calling strdup(), enabling a NULL pointer dereference that can crash analysisd when a compromised/malicious agent sends a crafted message to the Wazuh manager. Impact is denial of se...
CVE-2025-64095
creationtimestamp| type| source ---|---|--- 2025-10-29 00:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4c5etmxnu22 2025-10-29 00:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5isapkw2u 2025-10-31 04:18:20+00:00| seen|...
PT-2025-44323
Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.11.0 Description Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the fim alert implementation where it does not verify if the return value of ctime r is NULL before using it with...