MAL-2025-2562 Malicious code in com.unity.performance.profile-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0af641db458fc7a8378ef6660e94aa21d6e8a8662aa90cc72412d909765b39d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9418

creationtimestamp| type| source ---|---|--- 2025-03-20 14:04:36+00:00| seen| https://bsky.app/profile/potato.software/post/3lksuj4gzf42u...

CVE-2024-8502

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:41+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhqyh7k2g...

CVE-2024-11167

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:24+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhb2c3v2u...

CVE-2025-0508

creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8194 2025-03-20 13:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr45eq3b2k 2025-03-20 13:13:00+00:00| seen| https://t.me/cvedetector/20...

CVE-2024-12580

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and fileid in the /code/download/:sessionId/:fileId and /download/:userId/:fileid APIs are not validated or filtered, leading to potential log injection...

Detecting and Mitigating Apache Tomcat CVE-2025-24813

...

MAL-2025-3143 Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30092

creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:18+00:00| seen| https://t.me/cvedetector/20669 2025-03-20 00:49:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jypfu26...

CVE-2025-26475

creationtimestamp| type| source ---|---|--- 2025-03-19 18:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnbfvtu26 2025-03-19 18:49:29+00:00| seen| https://t.me/cvedetector/20652...

CVE-2025-29924 XWiki uses the wrong wiki reference in AuthorizationManager

XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, it's possible for an user to get access to private information through the REST API - but could also be through another API - when a sub wiki is using "Prevent unregistered users to view pages". The...

CVE-2025-29924

XWiki Platform contains an authorization bypass in subwikis that can expose private information via the REST API (and potentially other APIs) when rights like “Prevent unregistered users to view pages” or “Prevent unregistered users to edit pages” are enabled. Affected versions: before 15.10.14, ...

CVE-2020-9295

FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately detect certain types of malformed or non-standard RAR archives, potentially containing malicious...

5 Identity Threat Detection & Response Must-Haves for Super SaaS Security

Identity-based attacks are on the rise. Attackers are targeting identities with compromised credentials, hijacked authentication methods, and misused privileges. While many threat detection solutions focus on cloud, endpoint, and network threats, they overlook the unique risks posed by SaaS...

CVE-2025-1232

creationtimestamp| type| source ---|---|--- 2025-03-19 06:52:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8027 2025-03-19 07:57:40+00:00| seen| https://t.me/cvedetector/20623 2025-03-19 16:30:54+00:00| seen| Telegram/1nxUJd1r2Vli3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU 2025-03-19 16:48:40+00:0...

Exploit for Uncontrolled Search Path Element in Imagemagick

ImageMagick Arbitrary Code Execution CVE-2024-41817 Proof o...

Schneider Electric Active Devices Detection

The current plugin identifies Schneider devices that are still under active support. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable...

Ubuntu: Security Advisory (USN-7353-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2025-1303)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-1302)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...