51132 matches found
CVE-2025-5949
The Service Finder Bookings plugin for WordPress (
CVE-2025-34274
Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user. If an attacker is able to compromise the Logstash process - for example by exploiting an insecure plugin, pipeline configuration...
CVE-2024-13994
Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled. Under this configuration, any user can create valid login credentials for other users without proper authorization. This can lead to unauthorized account creation,...
CVE-2025-39663
Cross-Site Scripting XSS vulnerability in Checkmk's distributed monitoring allows a compromised remote site to inject malicious HTML code into service outputs in the central site. Affecting Checkmk before 2.4.0p14, 2.3.0p39, 2.2.0 and 2.1.0 eol...
Malicious code in vity-toolkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd2e751d57f4a04b6019488c79debf3467879ee63c322f22ebf35544584cff6 The package vity-toolkit was found to contain malicious code. Source: ghsa-malware bb4930932127303392cd175222ad1777bd0119cbea931b6bfb68c8913bbb0a40 A...
EUVD-2025-37221
Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unnecessary privileges vulnerability as it runs its embedded Logstash process as the root user. If an attacker is able to compromise the Logstash process - for example by exploiting an insecure plugin, pipeline configuration...
EUVD-2024-55057
Nagios XI versions prior to 2024R1.1.2 contain a missing authorization control when the 'Allow Insecure Logins' option is enabled. Under this configuration, any user can create valid login credentials for other users without proper authorization. This can lead to unauthorized account creation,...
CVE-2025-61120
AG Life Logger Android App version v1.0.2.72 and before package name com.donki.healthy, developed by IO FIT, K.K., contains improper access control vulnerabilities. Exposed credentials in traffic may allow attackers to misuse cloud resources, and predictable verification codes make brute-force...
Malicious code in cursor-ai-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cbd361c113d7d9176c54442b50ef54297ec337dc805f6ec21d0e275b187d05 The package cursor-ai-fork was found to contain malicious code. Source: ghsa-malware 77f90740d80a74fd38f9815f98257a414e78aa314b00b1a75f4d56352d972811...
MAL-2025-49257 Malicious code in fork-spoon-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230cc34701f276fd7c72ba75f580a0615bc12a6720dd3bedb7d98b99b24651c5 The package fork-spoon-fork was found to contain malicious code. Source: ghsa-malware 0e5798d27152d0cd13a2c05a43a6ffd1ec5ee70023bbffc173181ec3ecee8e3...
Malicious code in telegram-bot-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6146ccba5593f3f123cbe20b94fd9df9d168c3e4614e5bf93a1fdd8e96fc7d The package telegram-bot-starter was found to contain malicious code. Source: ghsa-malware...
Malicious code in telegram-bot-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850fdb1c7d5ecd92e025e8b58e36afd28fae3e1d4127151ee4e3ee8e634d9b0c The package telegram-bot-start was found to contain malicious code. Source: ghsa-malware...
Malicious code in botty-fork-baby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163cfd59ccdc251deb14c3ba812a8125ef8b4970b3d0ce4d99f155b44b359adb The package botty-fork-baby was found to contain malicious code. Source: ghsa-malware 9de1cc3699112a7cab37aafff858654d0c3f789ff52cb908e33691b1006c247...
Malicious code in bael-god-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a190d70fd70001a3e3dd4d774d216050ad60baed52732b3173643b6ac406f1aa The package bael-god-api was found to contain malicious code. Source: ghsa-malware cc3e0e9bea5461c6ca50da9dee528eac19ef454643b1f4de0a7a3c0ec897dd6d A...
Malicious code in custom-telegram-bot-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efed332de627322e3b4c8adc27a889238eb809493e86244e15d96e7b6e45dd87 The package custom-telegram-bot-api was found to contain malicious code. Source: ghsa-malware...
Malicious code in bael-god-thanks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb105ca33158c030cf28b649844c05d95a90e00aae8866710025a5ea6ed43a0 The package bael-god-thanks was found to contain malicious code. Source: ghsa-malware 1ada7d14f26d17acaa1f5bc8625c26c9dab2ad3018eeff170305cdd60e45247...
Malicious code in sai-tg-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13c29b341c706e72066be2c2c8227189924ec9438d5e2ae7944484b2af63375 The package sai-tg-api was found to contain malicious code. Source: ghsa-malware 5a9fb1188aa41761a69996f43b3f4551ba995a153cb1ca06ee384db1331d27fc Any...
Malicious code in salli-tg-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9583062e93b42d438d32b28f40f5bdd2df4a4b58978e73345410206944209b The package salli-tg-api was found to contain malicious code. Source: ghsa-malware 7bf68e0aaca553388835f15a3db2f5df6430b9a4419d17a5b89e3be52b62001b A...
MAL-2025-49268 Malicious code in salli-tg-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9583062e93b42d438d32b28f40f5bdd2df4a4b58978e73345410206944209b The package salli-tg-api was found to contain malicious code. Source: ghsa-malware 7bf68e0aaca553388835f15a3db2f5df6430b9a4419d17a5b89e3be52b62001b A...
The vulnerability of the memcpy() function in the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause a service failure.
The vulnerability of the memcpy function in the U-Boot loader is related to a numerical loss of significance. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failure through a specially created ext4 file...