EUVD-2025-36182

Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize: the POST parameter formkitmemoryrecovery in \RoxPostHandler::getCallbackAction and the 'memory cookie' read by...

CVE-2025-34292 BeWelcome/Rox PHP Object Injection RCE

Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize: the POST parameter formkitmemoryrecovery in \RoxPostHandler::getCallbackAction and the 'memory cookie' read by...

CVE-2025-34292

The CVE-2025-34292 issue affects Rox (BeWelcome) where unsafely deserializing untrusted data enables PHP object injection. User input flows into unserialize() via the POST parameter formkit_memory_recovery in RoxPostHandler::getCallbackAction and via the bwRemember memory cookie used by RoxModelB...

CVE-2025-34292 BeWelcome/Rox PHP Object Injection RCE

Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize: the POST parameter formkitmemoryrecovery in \RoxPostHandler::getCallbackAction and the 'memory cookie' read by...

Malicious code in @chatgptclaude_club/claude-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a4754ec4fdda490eb8df83dba70a4eca2d697b1db00133e748d26661ebc17a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48786 Malicious code in @chatgptclaude_club/claude-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a4754ec4fdda490eb8df83dba70a4eca2d697b1db00133e748d26661ebc17a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-vitals-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1207a63be39e0d3a2b8f5721ba241bde1b85c1246c5de3ec904e8eacab4e90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9212e51117e449a9e60cece9254daaa17a757088742195bf3c4396a0c5a8283 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48778 Malicious code in tailwind-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9212e51117e449a9e60cece9254daaa17a757088742195bf3c4396a0c5a8283 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48781 Malicious code in unused-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01031534d46574b4aca0e5341d43399ac25cf7c751f841cf6af2eec7b73fa797 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-comments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b884dae745a33568d094bb6b65f967284aa6b3c41a44f0cd80010c56d840eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48776 Malicious code in op-cli-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b3ae42ff2507fbd7e994719a2e19d362d037ccbce81544f7617a07bcf6468b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in add-module-exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c839bfd4379fee1d18fbca3447b73a811fda655fedf4480f2593d5d75149a421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48774 Malicious code in badgekit-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 845af37fdbb4804eebee38f23aa25a4147f6e1d3a5e908d5d3bbe855105da3a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48609 Malicious code in ember-simplepractice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00987c6703408a2f89dacae2be86183338d8ba3d0ccf1da4c5faed8f82600944 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Medium: java-21-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 a...

The vulnerability of the Jenkins automation server allows a perpetrator to compromise the target system.

The vulnerability of the Jenkins automation server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the target system remotely...

MariaDB Multiple Vulnerabilities (MDEV-36268, MDEV-36613)

MariaDB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if description...

MAL-2025-48610 Malicious code in @aml-ark/ark-experience-byteplus (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b9a81d78ce8d8f1da9a31e80166834c3098ef03d5ef0e58e1a03d1d93418314 Any computer that has this package installed or running should be considered...

CVE-2025-60954

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts...