Malicious code in pu-commerce-connect (npm)

The package pu-commerce-connect was found to contain malicious code...

MAL-2025-8400 Malicious code in @leaffm/leaf-connect-ringtons (npm)

The package @leaffm/leaf-connect-ringtons was found to contain malicious code...

MAL-2025-8405 Malicious code in @leaffm/leaf-connect-testingthis134 (npm)

The package @leaffm/leaf-connect-testingthis134 was found to contain malicious code...

MAL-2025-8375 Malicious code in @leaffm/leaf-connect-aligne (npm)

The package @leaffm/leaf-connect-aligne was found to contain malicious code...

MAL-2025-8392 Malicious code in @leaffm/leaf-connect-lauren_test (npm)

The package @leaffm/leaf-connect-laurentest was found to contain malicious code...

MAL-2025-8417 Malicious code in @leaffm/sce-leaf-connect (npm)

The package @leaffm/sce-leaf-connect was found to contain malicious code...

MAL-2025-8389 Malicious code in @leaffm/leaf-connect-groundtruth (npm)

The package @leaffm/leaf-connect-groundtruth was found to contain malicious code...

MAL-2025-8373 Malicious code in @leaffm/leaf-connect-additional-lengths (npm)

The package @leaffm/leaf-connect-additional-lengths was found to contain malicious code...

MAL-2025-8381 Malicious code in @leaffm/leaf-connect-bunty-pets (npm)

The package @leaffm/leaf-connect-bunty-pets was found to contain malicious code...

MAL-2025-8401 Malicious code in @leaffm/leaf-connect-snuz (npm)

The package @leaffm/leaf-connect-snuz was found to contain malicious code...

MAL-2025-8404 Malicious code in @leaffm/leaf-connect-testing12345678 (npm)

The package @leaffm/leaf-connect-testing12345678 was found to contain malicious code...

MAL-2025-15604 Malicious code in bespin-connect (npm)

The package bespin-connect was found to contain malicious code...

CVE-2025-5456

A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a...

CVE-2025-5462

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a deni...

CVE-2025-5468

Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a local authenticated attacker to re...

Vulnerabilities fixed in Ivanti Connect Secure, Policy Secure and ZTA Gateways

Ivanti has fixed vulnerabilities in Connect Secure, Policy Secure and ZTA Gateways. The vulnerabilities include a buffer over-read and a heap-based buffer overflow, both of which can be exploited by remote unauthenticated attackers to cause a denial-of-service DoS. There is also an issue with the...

CVE-2025-5468

Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a local authenticated attacker to re...

CVE-2025-5466

XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote authenticated attacker with admin privileges to trigger a denial of...

CVE-2025-5462

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a deni...

CVE-2025-5462

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a deni...