CVE-2025-53899 Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances t...

CVE-2025-53899 Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances t...

PT-2025-48373

Name of the Vulnerable Software and Affected Versions motogadget mo.lock Ignition Lock versions prior to 20251126 Description A security issue exists in the NFC Handler component of the motogadget mo.lock Ignition Lock. The issue involves the use of a hard-coded cryptographic key, potentially...

Motogadget mo.lock Ignition Lock security vulnerability

The motogadget mo.lock Ignition Lock is an electronic ignition lock and anti-theft system for motorcycles from the German company motogadget. A security vulnerability exists in motogadget mo.lock Ignition Lock 20251125 and earlier versions, which stems from the use of hard-coded encryption keys b...

CVE-2025-53899: Incorrectly Specified Destination in a Communication Channel

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on the system under certain circumstances t...

NVIDIA RunAI Privilege Escalation

The vulnerability of NVIDIA RunAI software is related to an improper restriction on the communication channels for the intended endpoints. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

MAL-2025-191477 Malicious code in bitcoin-main-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f6833ddd073b7c036ec32739e3cb826bd1eda9d3c350eed423548f64f047b2 The package bitcoin-main-lib was found to contain malicious code. Source: ghsa-malware 06ed1aa4aa61f36d953368c74cb3daf102b02842a6a27843021b499b033d71...

Malicious code in bitcoin-main-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f6833ddd073b7c036ec32739e3cb826bd1eda9d3c350eed423548f64f047b2 The package bitcoin-main-lib was found to contain malicious code. Source: ghsa-malware 06ed1aa4aa61f36d953368c74cb3daf102b02842a6a27843021b499b033d71...

Malicious code in bip40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376d623eb0ffaacfbc6857b02083c7a1d37460c78579f88ddf63e6850cadc3e1 The package bip40 was found to contain malicious code. Source: ghsa-malware 39978dd4e71a01636f852725943d9488f7e1ba9f71fe9ca6a1f402a6c747fa34 Any...

EUVD-2025-198806

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4...

SUSE-SU-2025:4174-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.5.0 ESR bsc1253188 - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component. - CVE-2025-13017:...

MAL-2025-190614 Malicious code in sentry-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b344e30280f8d412e7bb23ee828cea19637206f94ef992a20c372957c53b32 The package sentry-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190616 Malicious code in uber-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb767de450fdafc6d2aa88f77a1f0a95188ddb866565c91258711f3434ce561e The package uber-ui was found to contain malicious code. Source: ossf-package-analysis 9706819391825d94f76cf6530978ae5e88f3a58ccc386090ef6523825393fb...

MAL-2025-190605 Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in wishlist_dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96af5d4cffbd1a2bb13ecd403b9acf5e0fe62f6df151c6b511f556c9c0a11c31 The package wishlistdropdown was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-vermeer-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f2b16fc6904b39ed8ae073822dc4a01bf2613ba243b3c2787740dd3cf2fc4 The package airbnb-vermeer-node was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in o2-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3630b06db650613bea91129fed49f12bae373b86c45a215fce251a86d9d391d0 The package o2-tooltip was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a37ecd19e914e8801e6398f69fea68500fc8c985d6bff3dc5613aaf0ea09692 The package airbnb-phoenix was found to contain malicious code. Source: ossf-package-analysis...

RockyLinux 10 : thunderbird (RLSA-2025:21843)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21843 advisory. firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox:...

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...