CVE-2024-13849

creationtimestamp| type| source ---|---|--- 2025-02-20 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgl4rq2y 2025-02-20 13:08:54+00:00| seen| https://t.me/cvedetector/18523...

Rapid Response Monitoring My Security Account App

RISK EVALUATION Successful exploitation of this vulnerability could allow attacker to access sensitive information of other users. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure...

MAL-2025-1474 Malicious code in @roku-web-ui/pills (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6706bc6a9fa72cdaf41946c98c552ccf966a28fcfe7a69dd7820bc0ac92c2db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1475 Malicious code in @roku-web-ui/standard-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd0ebbc9b9d0dc7fe50b97f0fe8f714cafde380850c781af2dcdfabac3e26245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1473 Malicious code in @roku-web-ui/modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 512ba24a101785e7291eb757bbfc4432a141e965e32387d27725783342116e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1471 Malicious code in wkndaemassetcompute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c407d8af3732f19844c82d8ebb0b97754b59b979b9db2ec82f002e136ca1486f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the IBM QRadar SIEM system, related to the transmission of critical information in plaintext, allows a perpetrator to execute a “man-in-the-middle” type attack.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” type attack...

Mozilla Firefox Security Update (mfsa_2025-12) - Mac OS X

Mozilla Firefox is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Malicious code in elastic-buildkite-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 889d976fe581d0e221dc91fb52cc010669d68189ba293e437a6966b6decd515f The OpenSSF Package Analysis project identified 'elastic-buildkite-manager' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-1467 Malicious code in @xenial-ux/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44606337fc107c8d2c2199016ea7ec9f79003aa4ebd99f43cef39e8c272ec0af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1468 Malicious code in react-spectrum-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3d2f67a738249f4e3344635d91861eb0b4932967a2d5d72b90fd9b7bad665fb The OpenSSF Package Analysis project identified 'react-spectrum-monorepo' @ 3.0.0 npm as malicious. It is considered malicious because: - The...

Debunking the AI Hype: Inside Real Hacker Tactics

Is AI really reshaping the cyber threat landscape, or is the constant drumbeat of hype drowning out actual, more tangible, real-world dangers? According to Picus Labs' Red Report 2025 which analyzed over one million malware samples, there's been no significant surge, so far, in AI-driven attacks...

MAL-2025-1464 Malicious code in archon7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f53d83b877f02c6e6b51cad5ccf4940a0e19e8e9aeda69d9a9d013ca471bd64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1462 Malicious code in ab-typescript-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff357f39e4f6c3cdfa2b8e8ef8d23e3b77159f31f825545ce19fd8a9150f869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Elseta Vinci Protocol Analyzer

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and perform code execution on the affected system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such...

Malicious code in linter-coffee-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 292d0ff0a104c6e415fc2ea734ec189f699d6aecb4383502759e2053adddfb45 The OpenSSF Package Analysis project identified 'linter-coffee-variables' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-1388 Malicious code in zmcrypty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee24745300aa11ed0e92813032e7269a17e9c66f73b03ac3e38e6bd613268e1c The OpenSSF Package Analysis project identified 'zmcrypty' @ 66.6.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-1386 Malicious code in keycloak-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa8e4f6226555a04c5be8dab42fe39f502765a1bd0dad057b6e8c057939e5dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1391 Malicious code in voiceedgelite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fd93b14a943a875efb1d2602d31cc497e92f135adac765f65f2a0ffd72d6ad42 The OpenSSF Package Analysis project identified 'voiceedgelite' @ 1.1.5 npm as malicious. It is considered malicious because: - The package...

MAL-2025-1385 Malicious code in uyurettrtrtst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f69974d01d68b2e9cd5e64fdd40891f5a03977026f82ced386274cf20c966e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...