MAL-2025-48409 Malicious code in internal-greeter-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aba71c91c57a929f6d02d2775a1e431ee72be5d4e13215c18875202086b0c4e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48407 Malicious code in company-overview (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bf8d3a72c075224c157c2cf2307e520204ee333e3107d1f1b1bc6992b21dd4 Any computer that has this package installed or running should be considered...

MAL-2025-48429 Malicious code in debug-mj (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f60289f1a0f9296cf8aa9ed744c256c0963a95dc751ff52a708d2676d14825a Any computer that has this package installed or running should be considered...

Malicious code in debug-mj-v3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c0451e3b813ae12fff8e9f76bd4570a074a6bda1a7391e28f789182a6cb0e6 Any computer that has this package installed or running should be considered...

MAL-2025-48430 Malicious code in debug-mj-v3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c0451e3b813ae12fff8e9f76bd4570a074a6bda1a7391e28f789182a6cb0e6 Any computer that has this package installed or running should be considered...

Ubuntu: Security Advisory (USN-7820-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-42175

Name of the Vulnerable Software and Affected Versions Flowise versions 3.0.1 through 3.0.7 Flowise versions 3.0.8 and later with 'ALLOW BUILTIN DEP' enabled Description The software contains an authenticated remote code execution issue and a node VM sandbox escape. This is due to insecure use of...

Security Vulnerabilities fixed in Firefox ESR 115.29 — Mozilla

A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised...

MAL-2025-48400 Malicious code in graphorbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e39cb6a782c7394e47a516577dd7696fc2db73d710cdd07e5ceec3dbc46c7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33960

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users...

CVE-2025-60378

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

CVE-2025-31996

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users...

MAL-2025-48349 Malicious code in webpack-load-css-branch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fdf10edf9a7aa5d5eec0a8fea00190c4abb0beb6c3701a205d9d7527332e15c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v730-teste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c664c92894eb81039ca0bf6cdeaa5342f9a45cba4c5652366ccc00bb8c378968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48328 Malicious code in internallib_v730-teste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c664c92894eb81039ca0bf6cdeaa5342f9a45cba4c5652366ccc00bb8c378968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scr-theme-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b9b215ec9dee5723751b479575e1aacae2e38745b6504033b95b3da6f4f49e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48346 Malicious code in scr-web-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e603ee12cd5c70284024a104eb59fc914d86f04ad666bdf442253c0dd171ad4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scr-web-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e603ee12cd5c70284024a104eb59fc914d86f04ad666bdf442253c0dd171ad4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48345 Malicious code in scr-theme-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b9b215ec9dee5723751b479575e1aacae2e38745b6504033b95b3da6f4f49e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scr-cloud-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c714f60369d28f727a675effd525b4208077e225e46026b537d7606d48708a9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...