MAL-2025-190839 Malicious code in create-hardhat3-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a1dad1ef411b38a2b87787581837e9c9f5a26fff790d14057d04ca67c06ddc The package create-hardhat3-app was found to contain malicious code. Source: ghsa-malware...

Malicious code in test-foundry-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961bd7169c780d2201b29f4ada6a92f1c9d6eb26c8443c0365a7ea218daa7c8 The package test-foundry-app was found to contain malicious code. Source: ghsa-malware 9b0d08ebcb8c6a236f7c4c5785ac4f1ec1b4e2ede40366d6fc439473f946b3...

MAL-2025-190860 Malicious code in test-foundry-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961bd7169c780d2201b29f4ada6a92f1c9d6eb26c8443c0365a7ea218daa7c8 The package test-foundry-app was found to contain malicious code. Source: ghsa-malware 9b0d08ebcb8c6a236f7c4c5785ac4f1ec1b4e2ede40366d6fc439473f946b3...

EUVD-2025-198816

Malicious code in test-foundry-app npm...

Malicious code in test-hardhat-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c58c4506524c992c75582a4ebe5865965b7bf58281bd247ee81b3b08731515 The package test-hardhat-app was found to contain malicious code. Source: ghsa-malware 03564b5c607dce5fdce1c0f5802eb5816a37d6f74acf0e5ae3624f6e9b2224...

MAL-2025-190784 Malicious code in test-hardhat-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c58c4506524c992c75582a4ebe5865965b7bf58281bd247ee81b3b08731515 The package test-hardhat-app was found to contain malicious code. Source: ghsa-malware 03564b5c607dce5fdce1c0f5802eb5816a37d6f74acf0e5ae3624f6e9b2224...

EUVD-2025-198758

Malicious code in test-hardhat-app npm...

EUVD-2025-198773

Malicious code in create-glee-app npm...

MAL-2025-190767 Malicious code in create-glee-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0932871cd18a6f6a6b4dc800d53bb26dee4aa4d1ca50380eb529d8de49e31 The package create-glee-app was found to contain malicious code. Source: ghsa-malware e24413ea376e0b85679ffebea5b81417a76a0134b6cde174e7a183437326193...

Malicious code in create-glee-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0932871cd18a6f6a6b4dc800d53bb26dee4aa4d1ca50380eb529d8de49e31 The package create-glee-app was found to contain malicious code. Source: ghsa-malware e24413ea376e0b85679ffebea5b81417a76a0134b6cde174e7a183437326193...

Malicious code in trigo-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b342d6dbb3287df2002c455ce23553f3aa118b46e447741fa840397425741076 The package trigo-react-app was found to contain malicious code. Source: ghsa-malware 11f63c9b322a04a69d7c2c875302dfe971081157a6ea2c3360e65c5e4f9f5a9...

EUVD-2025-198665

Malicious code in trigo-react-app npm...

MAL-2025-190702 Malicious code in trigo-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b342d6dbb3287df2002c455ce23553f3aa118b46e447741fa840397425741076 The package trigo-react-app was found to contain malicious code. Source: ghsa-malware 11f63c9b322a04a69d7c2c875302dfe971081157a6ea2c3360e65c5e4f9f5a9...

CVE-2025-41087

Cross-Site Scripting XSS vulnerability stored in tha Taclia web application, where the uploaded SVG images are not properly sanitized. This allows to the attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of an...

WordPress Mstore Mobile App plugin <= 2.08 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Mstore Mobile App versions = 2.08...

echidna-credit-union-race-CTF

NOISYECHIDNA — Race Condition CTF This repository implements...

Xtool AnyScan App 安全漏洞

Xtool AnyScan App is an automotive diagnostic mobile application from China-based Xtool. A security vulnerability exists in Xtool AnyScan App version 4.40.40, which stems from a lack of authentication at the download endpoint of the update package...

CVE-2025-65501

Null pointer dereference in coapdtlsinfocallback in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSLgetappdata returns NULL...

Xtool AnyScan App 安全漏洞

Xtool AnyScan App is an automotive diagnostic mobile application from China-based Xtool. A security vulnerability exists in Xtooltech Xtool AnyScan Android Application version 4.40.40 and earlier, which stems from a lack of SSL certificate validation and could lead to a man-in-the-middle attack...

CVE-2025-65501

CVE-2025-65501 affects libcoap 4.3.5. The issue is a null pointer dereference in coap_dtls_info_callback() during a DTLS handshake when SSL_get_app_data() returns NULL, enabling potential denial of service. Fedora advisories indicate that updates to 4.3.5a are released for Fedora 42/43; Nessus/Op...