MAL-2025-48451 Malicious code in helosifjowe2342 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ff27da2ff03d6b016cef58dfffd401cb2f19e84cf787613903f36a4b834a7c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in class-scheduling (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c6e0c4e3747b5d4d90e715abcb95ca775ed281e4dd37013cbbfe20d19705b2 Any computer that has this package installed or running should be considered...

Malicious code in api_halodoc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48447 Malicious code in deere-ui-svg-to-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 229dbd48954859b2ccfde1edb98abf497a0d03d9e6d0c82d863cc2aea74ac1f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deere-ui-svg-to-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 229dbd48954859b2ccfde1edb98abf497a0d03d9e6d0c82d863cc2aea74ac1f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48443 Malicious code in deere-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355a3e4ff7770ab39aebef0eb84829ba45685d6fe842518c585de20021b505f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rockwell Automation ArmorStart AOP Denial of Service Vulnerability

Rockwell Automation ArmorStart AOP is a distributed motor controller from Rockwell Automation. The Rockwell Automation ArmorStart AOP suffers from a denial of service vulnerability that originates from entering an invalid value into a COM method, which can be exploited by an attacker to cause a...

SUSE CVE-2025-11710

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

Malicious code in corp-ais-client-my-channel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5c6a2e2c6632d11abe65b902c4dee848386ec4240aba0fee8f76983ac4ff56 The OpenSSF Package Analysis project identified 'corp-ais-client-my-channel-lib' @ 99.9.10 npm as malicious. It is considered malicious because:...

MAL-2025-48432 Malicious code in company-browser-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7621dd08044aeaacb68745078c793611d91031eb9852f8f667f739d485efe939 The OpenSSF Package Analysis project identified 'company-browser-package' @ 99.9.10 npm as malicious. It is considered malicious because: - The...

CVE-2025-9178

A denial-of-service security issue exists in the affected product and version. The security issue is caused through CIP communication using crafted payloads. The security issue could result in no CIP communication with 1715 EtherNet/IP Adapter.A restart is required to recover...

PT-2025-42275

Name of the Vulnerable Software and Affected Versions Apache Spark versions prior to 3.4.4 Apache Spark versions prior to 3.5.2 Apache Spark versions prior to 4.0.0 Description Apache Spark versions before 3.4.4, 3.5.2, and 4.0.0 utilize an insecure default network encryption cipher for RPC...

CVE-2025-55039: Improper Verification of Cryptographic Signature

This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...

Malicious code in arno-baidu-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48483 Malicious code in arno-baidu-test (npm)

The package communicates with a domain associated with malicious activity...

EUVD-2025-34192

A denial-of-service security issue exists in the affected product and version. The security issue stems from a high number of requests sent to the web server. This could result in a web server crash however; this does not impact I/O control or communication . A power cycle is required to recover...

CVE-2025-9178

A denial-of-service security issue exists in the affected product and version. The security issue is caused through CIP communication using crafted payloads. The security issue could result in no CIP communication with 1715 EtherNet/IP Adapter.A restart is required to recover...

CVE-2025-7328

Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able t...

CVE-2025-11710

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability affects Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

CVE-2025-11710

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...