13221 matches found
CVE-2025-26649
creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...
CVE-2025-27728
creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...
MAL-2025-3174 Malicious code in typesense-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 490e72092d3e2b725ff92c6b8bb87fb850509bdd1abbead8e8cb9427a4d92bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3176 Malicious code in @n37scancp/highlight.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 944af106fc0b2a334ed1ab4fb6784a0b2cc01e5f795b1de3449b8deaf6560b50 The OpenSSF Package Analysis project identified '@n37scancp/highlight.js' @ 11.11.12 npm as malicious. It is considered malicious because: - The...
Malicious code in @hyattcorp/design-tokens (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58f37a41edefebdd744efb01380e035aad567082e7fa96361effc44e4e9f1b49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3169 Malicious code in @hyattcorp/design-tokens (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58f37a41edefebdd744efb01380e035aad567082e7fa96361effc44e4e9f1b49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-31492
A flaw was found in modauthopenidc, an OpenID Connect authentication module for Apache HTTP Server. This vulnerability allows unauthenticated users to access protected content via crafted HTTP POST requests to protected resources when no application-level gateway is present. Mitigation Mitigation...
PT-2025-15309
Name of the Vulnerable Software and Affected Versions: Skia affected versions not specified Description: An out-of-bounds write issue exists in the initializeSwizzler function within SkBmpStandardCodec.cpp due to a heap buffer overflow. This could lead to remote escalation of privilege without...
PT-2025-18436
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the page pool dev alloc pages function could return NULL, leading to a crash due to the use of a NULL pointer. This issue is similar...
Malicious code in angular2-tesla-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7134a794a37bf8aae8607bb577adf8e9b11e74f9d080a48a1a4f935fb06a8b7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3136 Malicious code in clarunit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecdc65ad87798f6243b3d284367e755b52beb5eef68fcc0ca08b0b802230643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amazonui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c91b2f8916dd3773cd2df6a060349b8291d8d10972f04e2d2fd9a00498b8273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3135 Malicious code in @weave-mui/divider (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05453cfad038ef79e51253af5463badc60bb432de7750f211aa5aa087144ddfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3132 Malicious code in internal-utils-bronxi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2c2b247fbdf1610b485929f50b7e3394cf7f7d524a747b5941f0c64563f4407 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3130 Malicious code in @oldzeppelin/contract (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59936093e10e486bceef6e021a4ca771a2996cf612a809e2bea28243348f8968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in scrt-www (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c3dc483e4a4005db4d3a5ec2f2b2e8d63aa5b8258510f483ce9d4c7351b2c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3129 Malicious code in scrt-www (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c3dc483e4a4005db4d3a5ec2f2b2e8d63aa5b8258510f483ce9d4c7351b2c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
iot-vul
IoT Vulnerability Exploitation and Verification Framework Thi...
MAL-2025-3128 Malicious code in @fraudprevention/device-intelligence (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4499ba2c16cf02f2e12c45bba95e21bd588726f331f7a7a7f8eecfbb0369cafc The OpenSSF Package Analysis project identified '@fraudprevention/device-intelligence' @ 100.99.100 npm as malicious. It is considered malicious...