Malicious code in node-dpapi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a892f37c5be6dceac9cda541ce52d7dc4456d98acbfaa7d2a1e530d181567e29 The package node-dpapi1 was found to contain malicious code. Source: ghsa-malware 96a0f4f04fbe21b39cfa4fe8473fc5394bcecce0f814fcba5f89d6f6217e523d An...

MAL-2025-192308 Malicious code in module-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17f403951ae366e78ffa76ef093fdbeb3bd4fa3de3b9753c8d7b56fea6bede2 The package module-listener was found to contain malicious code. Source: ghsa-malware c922f84811ce200feff2b048957a9b81b6e78d33db6abc439c1ce9ef7a0950a...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7909-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7909-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

PT-2025-49281

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/action/schedule endpoint. When an authenticated user adds a schedule to an existing task, the schedule name is stored and later rendered in schedule listings without HTML...

PT-2025-49282

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devicegroups/ endpoint. When an authenticated user creates a device group, the name and description values are stored and later rendered in device group listings without...

CVE-2025-65806

The E-POINT CMS eagle.gsam-1169.1 file upload feature improperly handles nested archive files. An attacker can upload a nested ZIP a ZIP containing another ZIP where the inner archive contains an executable file e.g. webshell.php. When the application extracts the uploaded archives, the executabl...

Malicious code in elf-stats-bright-cocoa-293 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0977b2c356749420c94387d2037758a63eca2cf223b813843e975652cdc9a2d3 The package elf-stats-bright-cocoa-293 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-marzipan-cocoa-562 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eef2a7b97397b3b317b2e74da3cf23e6c43147a144bed8c3fbcbb35ca6249f The package elf-stats-marzipan-cocoa-562 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-mulled-ornament-810 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a68193ecbc69141a7ed610f69110b64551adf4ac175894416841205703c9db3 The package elf-stats-mulled-ornament-810 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

Malicious code in beep-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb7d61c321c68fa3a32e4203e38cb8655096fa5022defb8a301465b6175111 The package beep-types was found to contain malicious code. Source: ghsa-malware 66ecb0f8992d72a62cefb71f46fb521f18db115c524a498cddbe82d3e98539ca Any...

MAL-2025-192299 Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192297 Malicious code in elf-stats-bright-cocoa-293 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0977b2c356749420c94387d2037758a63eca2cf223b813843e975652cdc9a2d3 The package elf-stats-bright-cocoa-293 was found to contain malicious code. Source: ghsa-malware...

Adobe Experience Manager (AEM) Groovy Console

The remote Adobe Experience Manager AEM expose a Groovy console that allows users to execute arbitrary Groovy scripts on the server. This can lead to remote code execution and complete compromise of the AEM instance and the underlying server. No source data...

Adobe Experience Manager (AEM) Felix Console Default Credentials

The remote Adobe Experience Manager AEM Felix Console is configured with default or predictable credentials, which could allow an attacker to gain unauthorized access to the application and potentially compromise the underlying system. No source data...

CVE-2025-54307

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ endpoints allow low-privilege users to upload ZIP files to the server. The pluploadfileupload function handles these fil...

Malicious code in tailwindcss-animation-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fda6d7eaefe792f8b06f7ef177feea15d90da13962dbe59f48d7987a234aca The package tailwindcss-animation-css was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192293 Malicious code in tailwindcss-animation-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fda6d7eaefe792f8b06f7ef177feea15d90da13962dbe59f48d7987a234aca The package tailwindcss-animation-css was found to contain malicious code. Source: ghsa-malware...

Malicious code in email-validated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af72446800f2251ecdda400ad30c23637f628d1487ae5c911bb4283e3fe10c The package email-validated was found to contain malicious code. Source: ghsa-malware 9f2a0d9794c8d949cc051fe3c306af63ddb55b6848d0607ef1f5d332585a2fc...

MAL-2025-192291 Malicious code in email-regexed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a196eb68421b32096da5ff260a7a9aca6f9d74937768b62ae4aff437c0c89729 The package email-regexed was found to contain malicious code. Source: ghsa-malware 0dac0855a64ab32c42fcd0ab7694e81f0ca1ba1cbedb27990dad05e7162c51e1...