Malicious Package

Overview gets-random-datas is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview hari-zzz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview card-present-integration is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview class-scheduling is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-34976

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /filebird/v1/fb-wipe-clear-all-data function in all versions up to, and including, 6.4.9. This makes it possible for...

CVE-2025-11510 FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /filebird/v1/fb-wipe-clear-all-data function in all versions up to, and including, 6.4.9. This makes it possible for...

CVE-2025-11510: Improper Authorization

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /filebird/v1/fb-wipe-clear-all-data function in all versions up to, and including, 6.4.9. This makes it possible for...

PT-2025-42697

Name of the Vulnerable Software and Affected Versions FileBird – WordPress Media Library Folders & File Manager plugin versions prior to 6.4.9 Description The FileBird plugin for WordPress is susceptible to unauthorized data modification. A missing capability check on the...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.4) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.4)

org.keycloak:keycloak-admin-ui MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 4.0.2-25.0 -...

org.keycloak:keycloak-api-docs-dist (16.1.1), org.keycloak:keycloak-dependencies-server-all (16.1.1) +2 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (16.1.1)

org.keycloak:keycloak-admin-ui MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-api-docs-dist 16.1.1 - org.keycloak:keycloak-dependencies-server-all 16.1.1 ...

org.keycloak:keycloak-dependencies-server-all (25.0.3), org.keycloak:keycloak-dependencies-server-min (25.0.3) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.3)

org.keycloak:keycloak-account-ui MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.3 -...

org.keycloak:keycloak-dependencies-server-all (24.0.0), org.keycloak:keycloak-dependencies-server-min (24.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.0)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.0 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-dependencies-server-min (24.0.4) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (24.0.4)

org.keycloak:keycloak-account-ui MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 -...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-dependencies-server-min (25.0.5) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.5)

org.keycloak:keycloak-account-ui MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 -...

org.keycloak:keycloak-dependencies-server-all (23.0.4), org.keycloak:keycloak-dependencies-server-min (23.0.4) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (23.0.4)

org.keycloak:keycloak-admin-ui MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.4 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-server-all (24.0.1), org.keycloak:keycloak-dependencies-server-min (24.0.1) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.1)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.1 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-api-docs-dist (15.1.1), org.keycloak:keycloak-dependencies-server-all (15.1.1) +2 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (15.1.1)

org.keycloak:keycloak-admin-ui MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-api-docs-dist 15.1.1 - org.keycloak:keycloak-dependencies-server-all 15.1.1 ...

org.keycloak:keycloak-dependencies-server-all (25.0.0), org.keycloak:keycloak-dependencies-server-min (25.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (25.0.0)

org.keycloak:keycloak-account-ui MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.0 -...

org.keycloak:keycloak-dependencies-server-all (23.0.3), org.keycloak:keycloak-dependencies-server-min (23.0.3) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (23.0.3)

org.keycloak:keycloak-account-ui MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.3 -...

CVE-2025-62356

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection...