MAL-2025-43678 Malicious code in bunyan-spica-optimize-css-assets-webpack-plugin-await (npm)

The package bunyan-spica-optimize-css-assets-webpack-plugin-await was found to contain malicious code...

Malicious code in kurnia-empal64-breki (npm)

The package kurnia-empal64-breki was found to contain malicious code...

Malicious code in @majiajun7/claude-code (npm)

The package @majiajun7/claude-code was found to contain malicious code...

Malicious code in ux_websitereads (npm)

The package uxwebsitereads was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-46117 Malicious code in spark-webpack-react-app (npm)

The package spark-webpack-react-app was found to contain malicious code...

Malicious code in universal-airdrop-checker-ai (npm)

The package universal-airdrop-checker-ai was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-42186 Malicious code in @amiga-fwk-nodejs/metrics (npm)

The package @amiga-fwk-nodejs/metrics was found to contain malicious code...

CVE-2025-58881

creationtimestamp| type| source ---|---|--- 2025-09-05 14:47:03+00:00| seen| https://t.me/canyoupwnme/6883 2025-09-05 16:10:48+00:00| seen| https://t.me/canyoupwnme/6887...

CVE-2024-43115

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

Linux tls_alert_recv() DoS

The vulnerability of the tlsalertrecv function in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2025-22414

In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-41059

creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:21+00:00| seen| Telegram/zqvHZYMjk1bf1o6p3kGIyE85BeceV-d-lKfA8voWJ2PtMQ...

CVE-2024-43115 Apache DolphinScheduler: Alert Script Attack

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

CVE-2024-43115

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

CVE-2024-43115 Apache DolphinScheduler: Alert Script Attack

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

CVE-2024-43115

Apache DolphinScheduler is vulnerable to Remote Code Execution (RCE) due to improper input validation within the alert script check. An authenticated user can submit crafted input to execute arbitrary shell commands on the server. This issue affects versions prior to 3.2.2 . Remediation requires ...

org.apache.dolphinscheduler:dolphinscheduler-alert-all (>=3.2.0, <=3.2.1), org.apache.dolphinscheduler:dolphinscheduler-alert-server (>=2.0.1, <=3.2.1) +2 more potentially affected by CVE-2024-43115 via org.apache.dolphinscheduler:dolphinscheduler-alert-script (>=2.0.1, <=3.2.1)

org.apache.dolphinscheduler:dolphinscheduler-alert-script MAVEN version =2.0.1, =3.2.0, =2.0.1, =2.0.1, =2.0.1, =3.0.6 Source cves: CVE-2024-43115 Source advisory: MEND:CVE-2024-43115...

PT-2025-35703

Name of the Vulnerable Software and Affected Versions: Apache DolphinScheduler versions prior to 3.2.2 Description: An authenticated user can execute any shell script on the server through the alert script functionality due to improper input validation. Recommendations: Upgrade to version 3.3.1...

Release Information for Veeam ONE 13.0.1 Patch 1

Veeam ONE 13 Releases 13.0.2.6723 2026-05-27 What's New New Features and Improvements Suspicious Incremental Backup Size Alarm -- Extended Platform Support The Suspicious Incremental Backup Size alarm now covers all platforms supported in Veeam ONE v13, including Proxmox VE, oVirt KVM Oracle Linu...

CVE-2025-45805

creationtimestamp| type| source ---|---|--- 2025-09-02 20:16:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/50029 2025-09-03 03:00:07+00:00| seen| Telegram/cHcofYq5yVH7DLc69hIcAd2SE1E77x3v0sMIcSbMCujGDRo 2025-09-03 03:00:12+00:00| published-proof-of-concept|...