12907 matches found
CVE-2025-4570
An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information...
The vulnerability of Google Chrome’s WebRTC technology, which allows a violator to trigger a service failure.
The vulnerability of Google Chrome’s WebRTC technology is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
CVE-2025-53703
DuraComm SPM-500 DP-10iN-100-MU transmits sensitive data without encryption over a channel that could be intercepted by attackers...
MAL-2025-6116 Malicious code in pre-and-postinstall-scripts-example (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4994e0104f427d4e6ac062c0ec26e609127db5c43b703a286194e39d36ae9e9 Any computer that has this package installed or running should be considered...
MAL-2025-6068 Malicious code in @wptv/components (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in anchor5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8d44079a1abc61c092193be41f21fe5d45b1f7231f539e42efbef50278baa80 The OpenSSF Package Analysis project identified 'anchor5' @ 1.2.0 npm...
MAL-2025-6072 Malicious code in anchor5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8d44079a1abc61c092193be41f21fe5d45b1f7231f539e42efbef50278baa80 The OpenSSF Package Analysis project identified 'anchor5' @ 1.2.0 npm...
Malicious code in spring-context (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6100 Malicious code in jcl-over-slf4j (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6765b8e788daac3b9fcad973360085b07eb23632ecc6e6a30030682e006ff607 Any computer that has this package installed or running should be considered...
Malicious code in telenet (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in chime-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c47d81929483a169d2ee7d4f0f5c08d14518a52a1efa368fc87e2101bd75de5 Any computer that has this package installed or running should be considered...
Malicious code in login-oauth (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in ochot (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in ochot-odong (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-4570
An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information...
CVE-2025-4570
An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information...
CVE-2025-4569
CVE-2025-4569 affects ASUS MyASUS. The issue is an insecure sensitive key storage bug that could allow an unauthenticated actor to obtain a token used to access certain services. CVSSv4.0 vector indicates network attack with low complexity, no privileges required, and high impact on confidentiali...
PT-2025-30246 · Asus · Myasus
Name of the Vulnerable Software and Affected Versions: MyASUS affected versions not specified Description: An issue involving insecure storage of sensitive keys was identified in MyASUS. This could potentially allow an unauthorized actor to obtain a token used for communication with certain...