Malicious code in @leaffm/leaf-connect-cr (npm)

The package @leaffm/leaf-connect-cr was found to contain malicious code...

Malicious code in @leaffm/leaf-connect-test (npm)

The package @leaffm/leaf-connect-test was found to contain malicious code...

Malicious code in @leaffm/leaf-connect-testing12345678 (npm)

The package @leaffm/leaf-connect-testing12345678 was found to contain malicious code...

MAL-2025-8404 Malicious code in @leaffm/leaf-connect-testing12345678 (npm)

The package @leaffm/leaf-connect-testing12345678 was found to contain malicious code...

MAL-2025-15604 Malicious code in bespin-connect (npm)

The package bespin-connect was found to contain malicious code...

Malicious code in @leaffm/leaf-connect-97thvintage (npm)

The package @leaffm/leaf-connect-97thvintage was found to contain malicious code...

MAL-2025-8405 Malicious code in @leaffm/leaf-connect-testingthis134 (npm)

The package @leaffm/leaf-connect-testingthis134 was found to contain malicious code...

MAL-2025-8399 Malicious code in @leaffm/leaf-connect-remi-cachet (npm)

The package @leaffm/leaf-connect-remi-cachet was found to contain malicious code...

Malicious code in @leaffm/leaf-connect-gatineau (npm)

The package @leaffm/leaf-connect-gatineau was found to contain malicious code...

Malicious code in bespin-connect (npm)

The package bespin-connect was found to contain malicious code...

MAL-2025-25388 Malicious code in linear-connect (npm)

The package linear-connect was found to contain malicious code...

Malicious code in @leaffm/leaf-connect-additional-lengths (npm)

The package @leaffm/leaf-connect-additional-lengths was found to contain malicious code...

Malicious code in linear-connect (npm)

The package linear-connect was found to contain malicious code...

CVE-2025-5468

Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a local authenticated attacker to re...

CVE-2025-5462

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a deni...

CVE-2025-5456

A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a...

Versa Director Shell-Connect Command Execution

The vulnerability of the shell-connect.py file on the software platform for managing network infrastructure, Versa Director, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands through the...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2025-55197 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2025-55197 Source advisory:...

Vulnerabilities fixed in Ivanti Connect Secure, Policy Secure and ZTA Gateways

Ivanti has fixed vulnerabilities in Connect Secure, Policy Secure and ZTA Gateways. The vulnerabilities include a buffer over-read and a heap-based buffer overflow, both of which can be exploited by remote unauthenticated attackers to cause a denial-of-service DoS. There is also an issue with the...

IBM Sterling Connect:Direct Web Services Session Spoofing

The vulnerability of the software for connecting and managing data in IBM Sterling Connect:Direct Web Services is related to incorrect session duration. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...