Malicious code in airbnb-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dae0b179a06af0b299739c89700d1af972de2fb7f189152b0586038e0d34f298 The OpenSSF Package Analysis project identified 'airbnb-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-356 Malicious code in airbnb-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5dbe417775cdf936de0b309b6f15596072d0e6111399a3f24d499f98f0fde022 The OpenSSF Package Analysis project identified 'airbnb-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in airbnb-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3974af33b2ff24a8d1a41cf190b6e94b363d54036002937ad90ff49f27262b44 The OpenSSF Package Analysis project identified 'airbnb-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in airbnb-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 569af68d5b2f70cc46c62d3be362723205c02819f13c60a456a6925c2f6d1dd2 The OpenSSF Package Analysis project identified 'airbnb-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-352 Malicious code in no-style-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9044d80b8ff33b0d2a50511386c0fed003004f9452211938b949aca211b0866 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-326 Malicious code in bigcommerce.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f610f94d4adf4f1e09e9727a8c6960c6b9c0bef8733be71242a3bfdad135f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-history-demo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58e10d053f3cba02a172ebaf54943b9da709bd08e031437c58279fd60849064f The OpenSSF Package Analysis project identified 'wallet-history-demo-backend' @ 1.1.0 npm as malicious. It is considered malicious because: - Th...

MAL-2025-323 Malicious code in mathworks.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32e52ada951c82ef138dcd96976a00cb9d2e1c15f171f1b3c4768a030075bba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-HMG4-WWM5-P999 Umbraco Allows User Enumeration Feasible Based On Management API Timing and Response Codes

Impact Based on an analysis of response codes and timing of Umbraco 14+ management API responses, it's possible to determine whether an account exists. Patches Patched in 14.3.2 and 15.1.2. Workarounds None available...

Umbraco Allows User Enumeration Feasible Based On Management API Timing and Response Codes

Impact Based on an analysis of response codes and timing of Umbraco 14+ management API responses, it's possible to determine whether an account exists. Patches Patched in 14.3.2 and 15.1.2. Workarounds None available...

CVE-2025-21564

Oracle Agile PLM Framework (Oracle Supply Chain) is affected in version 9.3.6, specifically the Agile Integration Services component. The CVE entry describes an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to obtain unauthorized access to critic...

CVE-2025-21508

CVE-2025-21508 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected versions are prior to 9.2.9.0. The vulnerability allows a low-privileged, unauthenticated attacker with network access over HTTP to cause a hang or frequent crashes (complete denial ...

CVE-2025-24011

Summary: CVE-2025-24011 affects Umbraco CMS (.NET). From 14.0.0 up to, but not including, 14.3.2 and 15.1.2, an attacker can determine whether an account exists by analyzing response codes and timing of the management API. Impact: information exposure; no availability/integrity impact claimed. Ve...

AI tool GeoSpy analyzes images and identifies locations in seconds

It's just become even more important to be conscious about the pictures we post online. GeoSpy is an Artificial Intelligence AI supported tool that can derive a person’s location by analyzing features in a photo like vegetation, buildings, and other landmarks. And it can do so in seconds based on...

ZF Roll Stability Support Plus (RSSPlus)

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely proximal/adjacent with RF equipment call diagnostic functions which could impact both the availability and integrity. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

Cisco Catalyst Center Detection

Binary data ciscocatalystcenterversion.nbin...

MAL-2025-147 Malicious code in testpacke (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b837aa65eec730e3f6478200b0f279baef7aab09893e795b1173e13a686837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-146 Malicious code in showcase-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72fdeda4a40b1170fc3888255d22ac1cb9cfe37834663d8a5812539c21e7c8e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chipped (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b4d484b6a0b05dde597bbc9ba800eec0c201e3fc81387511d009ae01d5e07b3 The OpenSSF Package Analysis project identified 'chipped' @ 1.1.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2025-145 Malicious code in chipped (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b4d484b6a0b05dde597bbc9ba800eec0c201e3fc81387511d009ae01d5e07b3 The OpenSSF Package Analysis project identified 'chipped' @ 1.1.0 npm as malicious. It is considered malicious because: - The package communicat...