MAL-2025-40340 Malicious code in yarn-design-system-jsdoc-template (npm)

The package yarn-design-system-jsdoc-template was found to contain malicious code...

MAL-2025-7121 Malicious code in @bmw-ds/components (npm)

The package @bmw-ds/components was found to contain malicious code...

Malicious code in design-implementation (npm)

The package design-implementation was found to contain malicious code...

Malicious code in snap-design-system (npm)

The package snap-design-system was found to contain malicious code...

MAL-2025-7987 Malicious code in @healthbyro/design-tokens (npm)

The package @healthbyro/design-tokens was found to contain malicious code...

MAL-2025-40344 Malicious code in yarn-design-system-swiper (npm)

The package yarn-design-system-swiper was found to contain malicious code...

MAL-2025-40338 Malicious code in yarn-design-system-icons (npm)

The package yarn-design-system-icons was found to contain malicious code...

MAL-2025-18322 Malicious code in design-guide (npm)

The package design-guide was found to contain malicious code...

MAL-2025-6871 Malicious code in @azix058/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00076e3fa2882cf70c07ddb3715929161c6cd4253e088b91f38c06d9612e5edc The OpenSSF Package Analysis project identified '@azix058/design-system' @ 10.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @azix058/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00076e3fa2882cf70c07ddb3715929161c6cd4253e088b91f38c06d9612e5edc The OpenSSF Package Analysis project identified '@azix058/design-system' @ 10.0.0 npm as malicious. It is considered malicious because: - The...

DEBIAN-CVE-2025-8671

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service DoS. By opening streams and then rapidly triggering the serv...

Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2025-54207

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-54212

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Siemens COMOS

SUMMARY COMOS before V10.6 is affected by a local arbitrary code execution vulnerability in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure,...

Linux Distros Unpatched Vulnerability : CVE-2021-23995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been...

Policy Design in Zero-Trust Distributed Networks: Challenges and Solutions

Traditional security architectures are becoming more vulnerable to distributed attacks due to significant dependence on trust. This will further escalate when implementing agentic AI within the systems, as more components must be secured over a similar distributed space. These scenarios can be...

Bottinelli Informatical Vedo Suite 安全漏洞

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An information disclosure vulnerability exists in Bottinelli Informatical Vedo Suite, which stems from plaintext credentials stored in the...

CVE-2012-10030

FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or...

CVE-2012-10030 FreeFloat FTP Server Arbitrary File Upload

FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or...