Malicious code in dev.voltstro.unitywebbrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69add9c69f66a9fa7c5f3de6fa791fb0fe2f072260ad4786afe153bb26087943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4294 Malicious code in @elementor-editor-github-actions/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca0d018cb1686918115a926a22fcb726e9d6aac8d9d35e08948585ffa5e7a91f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.xr-line-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688c31fe545231e784aa21aa3349d80f9a04b02f893a52510f1be2216609f80f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agic-code-standards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc112253b7449973439fb3e54e02932c89644b30a3bc100193f687da852e7320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4326 Malicious code in com.unity.xr-line-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688c31fe545231e784aa21aa3349d80f9a04b02f893a52510f1be2216609f80f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4320 Malicious code in com.unity.jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf93d5628b724022ac35acd7556ea1b0636ea9fcc5e9e141963fed03258e5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in agic-code-standards

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4295 Malicious code in @sl4x0/internal-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6b6646e35885e431949fff4fae0f04d21961751f93c32a2e1136704409e728 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4365 Malicious code in jquery.currencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e84dbc5236755b427f757bbfee2cc19e5bcaa36be99d85cbe488921ecc812f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.build-report-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0616202469978d5a678e2f752b7f1d3d5c0b99ed091554d11c9f66ca32bca38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

CVE-2022-28793

Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT during device boot cycle after compromising TEE. The patch is applied in Galaxy S22 to prevent change of Android ROT after first initialization at boot time...

CVE-2022-23724

Use of static encryption key material allows forging an authentication token to other users within a tenant organization. MFA may be bypassed by redirecting an authentication flow to a target user. To exploit the vulnerability, must have compromised user credentials...

CVE-2021-43290

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker who has compromised a GoCD agent can upload a malicious file into a directory of a GoCD server. They can control the filename but the directory is placed inside of a directory that they can't control...

CVE-2021-25395

A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised...

CVE-2021-23008

On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x., BIG-IP APM AD Active Directory authentication can be bypassed via a spoofed AS-REP Kerberos Authentication Service Response response sent over a hijacked KDC...

CVE-2024-13957

SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

CVE-2021-22304

There is a use after free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected module. This may lead to module crash,...

CVE-2021-25415

Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable...

CVE-2024-13957 SSRF Server Side Request Forgery

SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...