Hackers Leak Data of 10,000 VirtualMacOSX Customers in Alleged Breach

Hackers leak data of 10,000 VirtualMacOSX customers in alleged breach, exposing names, emails, passwords, and financial details on a hacking forum...

Jasmin The Ransomware 安全漏洞

Jasmin The Ransomware is a powerful ransomware security testing tool used by ReadTeams, a personal developer of Siddhant Gour. A security vulnerability exists in Jasmin The Ransomware version 1.0.1 and prior versions, which stems from an incorrect manipulation of the parameter Search in the file...

MAL-2025-4988 Malicious code in routerprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bb5da39b59767e758d61cc281539a1860fb4914fc3b6a63e5bb7adfc9a4e12e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the built-in web server boa (/boafrm/formDMZ) of TOTOLINK EX1200T router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the built-in web server boa /boafrm/formDMZ of TOTOLINK EX1200T routers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by sending a specially crafted...

LB-LINK多款产品 安全漏洞

LB-LINK BL-X26 and others are products of China Bilink LB-LINK.LB-LINK BL-X26 is a wireless router.LB-LINK BL-LTE300 is a wireless router.LB-LINK BL-AC2100 is a wireless Wi-Fi 6 router. A security vulnerability exists in several LB-LINK products, which stems from a command injection in the...

The vulnerability of the systemd-coredump service of the Systemd daemon allows a attacker to compromise the confidentiality of the protected information.

The vulnerability of the systemd-coredump daemon of Systemd is related to an incorrect configuration of the kernel parameter fs.suiddumpable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of protected information...

The vulnerability of the setWiFiRepeaterCfg() function in the microprogrammed software of the TOTOLink T10 routers allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setWiFiRepeaterCfg function in the TOTOLink T10 router’s microprogramming system arises due to buffer overflow when processing the password parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2025-49200

CVE-2025-49200 describes unencrypted backup files that can lead to disclosure of sensitive information when a backup is downloaded and decompressed. The linked sources reference SICK Field Analytics and SICK Media Server in relation to vulnerable backups, with no explicit product version or compo...

Malicious code in solanautil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a994a5a77cea13db3655b647260e91eb43eaf01123269218c0378fdd8d94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-42998

The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to bypass the 403 Forbidden error and access restricted pages. This leads to low impact on confidentiality of the application, there is no impact on integrity and availability...

CVE-2025-49651

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI...

like-girl 安全漏洞

like-girl is a couple logging tool by the individual developer of kiCode111 in China. A security vulnerability exists in like-girl version 5.2.0, which originates from SQL injection due to incorrect operation of the parameters imgDatd/imgText/imgUrl in the file /admin/ImgAddPost.php...

Sungrow iSolarCloud 安全漏洞

Sungrow iSolarCloud Sunshine Cloud is a software for monitoring and managing PV power plants from China's Sunny Power Sungrow. A security vulnerability exists in Sungrow iSolarCloud, which stems from an under-restricted MQTT service that could result in subscribing to arbitrary topics and...

MAL-2025-4787 Malicious code in @react-native-aria/separator (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c4f88a3038167bc7dfee653f5f7da062761079e770fccd80c28832842ac9c014 React Native ARIA and @gluestack-ui/utils had unauthorized new versions published that contained malicious code via a public access token...

MAL-2025-4777 Malicious code in @react-native-aria/button (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 59aea492d433f73b670e379d9e7e5131f8b7a98b245557a4cb8cce7565baaa00 React Native ARIA and @gluestack-ui/utils had unauthorized new versions published that contained malicious code via a public access token...

MAL-2025-4802 Malicious code in @loybung/provider-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc5e2aaa75780249ef49329cc88e74468511da4956872cadb22549951afb87e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4853 Malicious code in mockup-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47de2f1ea832ed5ca1de7b318fac1b4e38fd7f83c2b66d97c4c38cfab1da216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4912 Malicious code in yux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32619602ea22f43c922bd51fb5af4f417fee447f162999a6e291f7f83a39e9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4823 Malicious code in dpts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18dd94071e8740ce21a5f0aa3abd080e376fc53065d5f7d99b2edb87c46a09e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a new EFI/UEFI specification from Insyde China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O. An attacker exploiting this vulnerability could bypass certain features. The following products and...