Malicious Package

Overview accounts-base is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview facts-base is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in facts-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd985aa898a134a3edaeb33d9629378a215a674e8110bb88fbbdfce59c8883e The package facts-base was found to contain malicious code. Source: ghsa-malware 11ed9b0a6622d128df892c963646c0dd03c4a65ddd22b4ac0aebea5d9f4b0adc Any...

EUVD-2025-202365

Malicious code in facts-base npm...

MAL-2025-192410 Malicious code in facts-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd985aa898a134a3edaeb33d9629378a215a674e8110bb88fbbdfce59c8883e The package facts-base was found to contain malicious code. Source: ghsa-malware 11ed9b0a6622d128df892c963646c0dd03c4a65ddd22b4ac0aebea5d9f4b0adc Any...

Malicious Package

Overview datadog-checks-base is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-66405

Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch...

2025-12 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5071544)

2025-12 Cumulative Update for Windows 10 Version 1809 for x64-based Systems KB5071544...

2025-12 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5071544)

2025-12 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5071544...

Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments

Impact CVE-2025-13877 is an authentication bypass vulnerability caused by insecure default JWT key usage in NocoBase Docker deployments. Because the official one-click Docker deployment configuration historically provided a public default JWT key, attackers can forge valid JWT tokens without...

CVE-2025-66622

matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.joinrules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room wit...

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...

CVE-2025-66622

Affected software: matrix-sdk-base (base component for Matrix Rust SDK). Vulnerability: Versions 0.14.1 and earlier cannot handle responses with custom m.room.join_rules values due to a serialization bug, which can cause a denial-of-service by stalling the crate’s sync process when invited to a r...

CVE-2025-66622 matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values

matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.joinrules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room wit...

CVE-2025-66622 matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values

matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.joinrules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room wit...

CVE-2025-66622: Improper Handling of Exceptional Conditions

matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.joinrules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room wit...

KLA90816 ACE vulnerability in Microsoft Copilot Plugin

A remote code execution vulnerability was found in Microsoft Copilot Studio. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-64671 Exploitation Related products GitHub-Copilot-Plugin CVE list CVE-2025-64671 critical KB list Solution Install...

KLA90815 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof us...

alerter (>=0.3.0, <=0.3.2), crate_glitch (0.2.0) +14 more potentially affected by CVE-2025-66622 via matrix-sdk-base (>=0.1.0, <=0.5.1)

matrix-sdk-base CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 and more Source cves: CVE-2025-66622 Source advisory: OSV:GHSA-JJ6P-3M75-G2P3...

GHSA-JJ6P-3M75-G2P3 matrix-sdk-base denial of service via custom m.room.join_rules event values

The matrix-sdk-base crate is unable to handle responses that include custom m.room.joinrules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate's sync process will stall, preventin...