PT-2025-34680 · Lostvip Com · Ruoyi-Go

Name of the Vulnerable Software and Affected Versions: lostvip-com ruoyi-go versions prior to 2.1 Description: A security flaw exists in the DownloadTmp/DownloadUpload function within the modules/system/controller/CommonController.go file. Manipulation of the fileName argument can lead to a path...

PT-2025-34684 · Ruoyi-Go · Ruoyi-Go

Name of the Vulnerable Software and Affected Versions: ruoyi-go versions up to 2.1 Description: A weakness exists in the SelectListByPage function of the modules/system/dao/GenTableDao.go file. Manipulation of the isAsc/orderByColumn argument can lead to SQL injection. This issue is potentially...

CVE-2025-9102

The CVE-2025-9102 issue affects 1&1 Mail & Media mail.com App (Android) version 8.8.0, specifically the AndroidManifest.xml of component com.mail.mobile.android.mail. Root cause: improper export of Android application components, enabling a local attacker to trigger an attack on the localhost. Pu...

CVE-2025-9093

A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android. The manipulation leads to improper export of android application components. The attack needs to be approached locally...

PT-2025-33518 · WordPress · Ithemes Serverbuddy

Name of the Vulnerable Software and Affected Versions: iThemes ServerBuddy versions n/a through 1.0.5 Description: A Cross-Site Request Forgery CSRF vulnerability exists in iThemes ServerBuddy by PluginBuddy.Com, allowing Object Injection. Recommendations: At the moment, there is no information...

Malicious code in airship.com (npm)

The package airship.com was found to contain malicious code...

Malicious code in @com-td-aacs/td (npm)

The package @com-td-aacs/td was found to contain malicious code...

Malicious code in @zalastax/nolb-com_d (npm)

The package @zalastax/nolb-comd was found to contain malicious code...

Malicious code in eaze.com (npm)

The package eaze.com was found to contain malicious code...

Malicious code in en.ephoto360.com (npm)

The package en.ephoto360.com was found to contain malicious code...

MAL-2025-37891 Malicious code in uolpainelcloud-painelcloud-host-uol-com-br (npm)

The package uolpainelcloud-painelcloud-host-uol-com-br was found to contain malicious code...

MAL-2025-10970 Malicious code in @zalastax/nolb-com_w (npm)

The package @zalastax/nolb-comw was found to contain malicious code...

MAL-2025-17318 Malicious code in com.digmap.voicerecog (npm)

The package com.digmap.voicerecog was found to contain malicious code...

MAL-2025-7132 Malicious code in @com-td-aacs/td (npm)

The package @com-td-aacs/td was found to contain malicious code...

MAL-2025-19639 Malicious code in en.ephoto360.com (npm)

The package en.ephoto360.com was found to contain malicious code...

Malicious code in com.microsoft.altspacevr_uploader (npm)

The package com.microsoft.altspacevruploader was found to contain malicious code...

Malicious code in com.unity.ugui (npm)

The package com.unity.ugui was found to contain malicious code...

MAL-2025-17325 Malicious code in com.microsoft.azure.spatial-anchors-sdk.core (npm)

The package com.microsoft.azure.spatial-anchors-sdk.core was found to contain malicious code...

Malicious code in fleet.vimcar.com (npm)

The package fleet.vimcar.com was found to contain malicious code...

Malicious code in @zalastax/nolb-com (npm)

The package @zalastax/nolb-com was found to contain malicious code...