CVE-2024-36004

creationtimestamp| type| source ---|---|--- 2025-08-15 22:40:07+00:00| seen| https://gist.github.com/FlorianHeigl/6c2f7d02ae85c93f64d38176c57f805f 2026-02-27 08:45:57+00:00| seen| https://gist.github.com/morecitricacid-coder/ec64f9313e2ced9b564171986dff5be5...

Exploit for OS Command Injection in Fortinet Fortisiem

watchTowr-vs-FortiSIEM-CVE-2025-25256 Detection Artifact Gene...

Linux Distros Unpatched Vulnerability : CVE-2025-4918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR...

Linux Distros Unpatched Vulnerability : CVE-2022-3109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointe...

Linux Distros Unpatched Vulnerability : CVE-2024-38585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc Pass userplen to memcpy instead of heap-len...

MAL-2025-37607 Malicious code in uim-web-sdk (npm)

The package uim-web-sdk was found to contain malicious code...

MAL-2025-7372 Malicious code in @crabas0npm/libero-earum-non (npm)

The package @crabas0npm/libero-earum-non was found to contain malicious code...

Malicious code in fabalous-login (npm)

The package fabalous-login was found to contain malicious code...

Malicious code in dyplot (npm)

The package dyplot was found to contain malicious code...

Malicious code in device-detection-paypal (npm)

The package device-detection-paypal was found to contain malicious code...

Malicious code in idig-onapp (npm)

The package idig-onapp was found to contain malicious code...

MAL-2025-37706 Malicious code in umbriel-sequelize-tool-browserify (npm)

The package umbriel-sequelize-tool-browserify was found to contain malicious code...

MAL-2025-15131 Malicious code in ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu (npm)

The package ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu was found to contain malicious code...

MAL-2025-18359 Malicious code in device-detection-paypal (npm)

The package device-detection-paypal was found to contain malicious code...

MAL-2025-22187 Malicious code in hapi-services (npm)

The package hapi-services was found to contain malicious code...

MAL-2025-19382 Malicious code in elec6ron (npm)

The package elec6ron was found to contain malicious code...

CVE-2023-43692

An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. Out-of-bound reads in strings detection utilities lead to system crashes...

CVE-2025-20217 Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability

A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to incorrect...

CVE-2025-20217 Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability

A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to incorrect...

AZL-66297 CVE-2025-54389 affecting package aide for versions less than 0.18.6-2

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...