MAL-2025-191651 Malicious code in my-first-pypi-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f789a8192ed7a62a0fa9327e495ac8ca2658ff556673ca8d207f7954204ec160 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-9202

The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcomenoticeimporthandler function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2025-9202 ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcomenoticeimporthandler function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2025-9202 ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcomenoticeimporthandler function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2025-9202

CVE-2025-9202 affects ColorMag for WordPress (versions ≤ 4.0.19). The vulnerability arises from a missing capability check in the welcome_notice_import_handler(), allowing authenticated users with Subscriber-level access and above to install the ThemeGrill Demo Importer plugin and modify data. Th...

PT-2025-33905 · Themegrill +1 · Themegrill-Demo-Importer +1

Name of the Vulnerable Software and Affected Versions: ColorMag versions prior to 4.0.20 Description: The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the welcome notice import handler function. This allows authenticated...

CVE-2025-9202: Missing Authorization

The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcomenoticeimporthandler function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above...

WordPress ColorMag plugin <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ ThemeGrill Demo Importer Plugin Installation vulnerability discovered by Dmitrii Ignatyev in WordPress Theme ColorMag versions = 4.0.19...

CVE-2025-51986

An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packet...

Malicious code in @zalastax/nolb-demo- (npm)

The package @zalastax/nolb-demo- was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-i (npm)

The package @zalastax/nolb-demo-i was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-v (npm)

The package @zalastax/nolb-demo-v was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-y (npm)

The package @zalastax/nolb-demo-y was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-x (npm)

The package @zalastax/nolb-demo-x was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-z (npm)

The package @zalastax/nolb-demo-z was found to contain malicious code...

Malicious code in cas-fee-demo (npm)

The package cas-fee-demo was found to contain malicious code...

Malicious code in demo-npm (npm)

The package demo-npm was found to contain malicious code...

Malicious code in es6-demo-react-npm2 (npm)

The package es6-demo-react-npm2 was found to contain malicious code...

Malicious code in ng-demo-lib-ts (npm)

The package ng-demo-lib-ts was found to contain malicious code...

Malicious code in phantomjs-crawler-demo (npm)

The package phantomjs-crawler-demo was found to contain malicious code...