MAL-2025-192590 Malicious code in example-vue2-micro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192591 Malicious code in i18never (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632dc2988c33d66794e0a132a9b305b8ea29788a777889291647e5a0514d51b2 The package i18never was found to contain malicious code. Source: ghsa-malware f8457dd91952dfd151549c2a5de56ff988a48ae31ebd0eae188e8a62999cb040 Any...

Malicious code in i18never (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632dc2988c33d66794e0a132a9b305b8ea29788a777889291647e5a0514d51b2 The package i18never was found to contain malicious code. Source: ghsa-malware f8457dd91952dfd151549c2a5de56ff988a48ae31ebd0eae188e8a62999cb040 Any...

Malicious code in nad-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34249dc2bb9d97e2f560efbcef33d2f0f0de8cb15f9c66a984697700d6b92d43 The package nad-home was found to contain malicious code. Source: ghsa-malware 5d84934ad23672579c5ab6e2f431b6f1b99a7a8f0e872a628503037c6298f8d4 Any...

MAL-2025-192594 Malicious code in prod-natwest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd39817ff9b18b049493c5014a7a0d4f69bd3cf2f4f2a2aebff64453e6ca7519 The package prod-natwest was found to contain malicious code. Source: ghsa-malware efa89a8af6324d2f6726e938c72b64a0b9a1ffbe7788455e95c7ff05752aba50 A...

MAL-2025-192596 Malicious code in starling-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cb3e1a7a02e3f4215b9e7e7d4f0034bd086085c49a157f37ecf151a9009610 The package starling-api was found to contain malicious code. Source: ghsa-malware a935f963069dc7da39338aa1f718ac33babb8d366d6e23c489a4515b776d6577 A...

Malicious code in elf-stats-fuzzy-wreath-278 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de72f83ee4c58e98151bb08bdad43674b0ee28f24618856adaf402b3e2ddbcd9 The package elf-stats-fuzzy-wreath-278 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-nutmeg-sleigh-350 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e43446814eeb05f58979f02ff96534374a9f069055bcc5f5f97425254b0817 The package elf-stats-nutmeg-sleigh-350 was found to contain malicious code. Source: ghsa-malware...

Malicious code in betterjsloggin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0ccde11f9011e9a5b0f96421a9d3088ed2f2604afdfc4f24d3753497729a06 The package betterjsloggin was found to contain malicious code. Source: ghsa-malware 9474602fb42d55f04ad6c25502fa73adc2f3313def621342428ea0b2f13c3d28...

Malicious code in swissid-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ce12ad99bb87750b22a3aa2c0d4bae036e647f446f6c05eb46b7fad1571d13 The package swissid-common was found to contain malicious code. Source: ghsa-malware 2657ec223bbf476c870a3f34e60928d95b1512176e7762f2c01a9aa759f75d98...

Malicious code in sds-swissid-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfba6a19220522fe10bbf564a1b96c3b7da5de600c03e1e683976b0c6cd36aeb The package sds-swissid-common was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192580 Malicious code in sds-auth-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30a562f838b9db64453d7276cc2e0f4f63c1810fed94fd3e672a90e00d720b1 The package sds-auth-ui was found to contain malicious code. Source: ghsa-malware 4ebd619fe42c2229ad69655d504fa4e869ba861d01647c67418e624e066e0db2 An...

MAL-2025-192581 Malicious code in sds-oauth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11edc1113892a2a7000ea8835ce5819da044898e6a4c24a8ce57f8c00d5f351 The package sds-oauth-client was found to contain malicious code. Source: ghsa-malware f7e9cce8e795bc77f5fa0dff91fc1a61fb00b989ced3e091d402dca108bf21...

EUVD-2025-203487

ChurchCRM is an open-source church management system. Prior to version 6.5.0, the application echoes back plaintext passwords submitted by users in subsequent HTTP responses. This information disclosure significantly increases the risk of credential compromise and may amplify the impact of other...

CVE-2025-67874 ChurchCRM has plaintext password return in response

ChurchCRM is an open-source church management system. Prior to version 6.5.0, the application echoes back plaintext passwords submitted by users in subsequent HTTP responses. This information disclosure significantly increases the risk of credential compromise and may amplify the impact of other...

📄 HighCMS 12.x SQL Injection

HighCMS version 12.x remote SQL injection proof of concept exploit written in Python. ============================================================================================================================================= | Title : HighCMS v12.x SQL Injection Exploit | | Author : indoushka ...

ROS-20251216-7322

A vulnerability in the "virtioCoreR3VirtqInfo" function of the "VBoxManage debugvm" command of the Oracle VM VirtualBox virtualization software tool is related to a stack-based buffer overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary code and gain unauthoriz...

GHSA-PCQX-8QWW-7F4V OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources

A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources CRs that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these elevated permissions to create privileged...

MAL-2025-192574 Malicious code in bignumex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c839a719fb3ac340e251cb4eb34af0d9240de8d7e9f13605963617d9e14929b3 The package bignumex was found to contain malicious code. Source: ghsa-malware 32884ff132ca375f235dd1d6e843a3178d5777c11127c3f8f155472d2f26a455 Any...

Malicious code in sd-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429e5a82bf0260fda2c531fb7909cf8b8417e424119df889ee7bad0ca4b439c2 The package sd-security was found to contain malicious code. Source: ghsa-malware e295e65302840407a5f64ae51ff2616121573aa518cd29d40198edf692c604de An...