VulnCheck KEV: CVE-2025-54782

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...

Amazon Linux 2023 : captree, libcap, libcap-devel (ALAS2023-2025-1141)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1141 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which a...

Linux Distros Unpatched Vulnerability : CVE-2022-3178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV. CVE-2022-3178 Note that Nessus relies on the presence of the package as reported by the...

CVE-2025-7972

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODEENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers...

MAL-2025-6939 Malicious code in makerjs-dev (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in europa-express-development-luminescence (npm)

The package europa-express-development-luminescence was found to contain malicious code...

Malicious code in development-module-wezen-solarnebula (npm)

The package development-module-wezen-solarnebula was found to contain malicious code...

Malicious code in rollup-development-vega-prettier-plugin-markdown (npm)

The package rollup-development-vega-prettier-plugin-markdown was found to contain malicious code...

gulu-ui (>=0.0.6 <=0.0.7) potentially affected by unknown CVE via dev-test (=0.0.1-security)

dev-test NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on dev-test and may be impacted: - gulu-ui =0.0.6, =0.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-18345...

Malicious code in semantic-release-futurology-development-canopus (npm)

The package semantic-release-futurology-development-canopus was found to contain malicious code...

MAL-2025-25663 Malicious code in luna-blaze-development-terser-webpack-plugin (npm)

The package luna-blaze-development-terser-webpack-plugin was found to contain malicious code...

MAL-2025-8390 Malicious code in @leaffm/leaf-connect-indu-dev-store (npm)

The package @leaffm/leaf-connect-indu-dev-store was found to contain malicious code...

MAL-2025-33095 Malicious code in shield-sdk (npm)

The package shield-sdk was found to contain malicious code...

Malicious code in leda-development-config-eclipse (npm)

The package leda-development-config-eclipse was found to contain malicious code...

Malicious code in holography-charon-axios-development (npm)

The package holography-charon-axios-development was found to contain malicious code...

Malicious code in kinvey-phonegap-angular-sdk (npm)

The package kinvey-phonegap-angular-sdk was found to contain malicious code...

Malicious code in gjs-development-scripts (npm)

The package gjs-development-scripts was found to contain malicious code...

Malicious code in development-antares-cosmogenic-enceladus (npm)

The package development-antares-cosmogenic-enceladus was found to contain malicious code...

Malicious code in apex-bioinformatics-development-geodynamo (npm)

The package apex-bioinformatics-development-geodynamo was found to contain malicious code...

Malicious code in nova-sqlite-jovian-development (npm)

The package nova-sqlite-jovian-development was found to contain malicious code...