PT-2025-33423 · Linlinjava · Litemall

Name of the Vulnerable Software and Affected Versions: linlinjava litemall versions up to 1.8.0 Description: A vulnerability was identified in linlinjava litemall. The issue affects an unknown functionality within the /admin/config/express file of the Business Logic Handler component. Manipulatio...

PT-2025-33498 · Drupal · Drupal Config Pages

Name of the Vulnerable Software and Affected Versions: Drupal Config Pages versions 0.0.0 through 2.17.9 Description: Missing authorization allows forceful browsing of Config Pages. Recommendations: Update to version 2.18.0 or later...

PT-2025-33502 · Msoft · Msoft Mflash

Name of the Vulnerable Software and Affected Versions: MSoft MFlash version 8.0 Description: A vulnerability has been found in MSoft MFlash that allows execution of arbitrary code on the server. The issue occurs in the integration configuration functionality, which is only available to...

Linux Distros Unpatched Vulnerability : CVE-2018-18506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration PAC file or if a PAC file is loaded locally, this PAC file can specify...

CVE-2025-55169

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/downloadremessa.php endpoint. This vulnerability could allow an attacker to...

Malicious code in config-doc (npm)

The package config-doc was found to contain malicious code...

Malicious code in config-app (npm)

The package config-app was found to contain malicious code...

Malicious code in eslint-config-skyscanner-test (npm)

The package eslint-config-skyscanner-test was found to contain malicious code...

Malicious code in tslint-config-toolbox (npm)

The package tslint-config-toolbox was found to contain malicious code...

Malicious code in bulma-async-socketio-commitlint-config-angular (npm)

The package bulma-async-socketio-commitlint-config-angular was found to contain malicious code...

Malicious code in eslint-config-lendesk (npm)

The package eslint-config-lendesk was found to contain malicious code...

Malicious code in eslint-config-10up (npm)

The package eslint-config-10up was found to contain malicious code...

Malicious code in @zalastax/nolb-eslint-config-x (npm)

The package @zalastax/nolb-eslint-config-x was found to contain malicious code...

Malicious code in yandex-app-config (npm)

The package yandex-app-config was found to contain malicious code...

Malicious code in afisha-config (npm)

The package afisha-config was found to contain malicious code...

Malicious code in public-config (npm)

The package public-config was found to contain malicious code...

Malicious code in node-config-express-sagitta-loopback (npm)

The package node-config-express-sagitta-loopback was found to contain malicious code...

Malicious code in quito-eslint-config-octans-ophiuchus (npm)

The package quito-eslint-config-octans-ophiuchus was found to contain malicious code...

Malicious code in optimize-css-assets-webpack-plugin-octans-eslint-config-farout (npm)

The package optimize-css-assets-webpack-plugin-octans-eslint-config-farout was found to contain malicious code...

Malicious code in eslint-config-frantic1048 (npm)

The package eslint-config-frantic1048 was found to contain malicious code...