MAL-2025-191122 Malicious code in lang-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7644eb22af82aaf1aeebcd8954139ce3dc9b43a0db43be02605ee10037e3f75 The package lang-codes was found to contain malicious code. Source: ghsa-malware 80738e6b29d50856453735fa6d92a27222eb3def027ae81195eb7555e076f7df Any...

MAL-2025-191003 Malicious code in react-native-phone-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e134ec88971e1ecadce79d1699bde00b798633b1ef9a0f6ebb2dbf67a51cdf5 The package react-native-phone-call was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190969 Malicious code in invo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4a40c8b32a7c38f435045392647f8c5024b472cd396c5d370f6f90eb37848 The package invo was found to contain malicious code. Source: ghsa-malware 26188e61833b5e2bbf47803695cd609aa04a940cd68950202e5908815871f09f Any...

MAL-2025-191023 Malicious code in tenacious-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61051d9fdf4393e5d5b5336a35ce010a5bd613ab5e8c9b1f45c9c3a409f365c5 The package tenacious-fetch was found to contain malicious code. Source: ghsa-malware 0c44fc9d1c7099876e590cd69eb0d5ff3928dcc439cfe74cce255584a3455cf...

MAL-2025-190943 Malicious code in web-scraper-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfaccc27abfc21f8c77b6fdf8878b91578a74d08526e6995cc52c2922ca3588 The package web-scraper-mcp was found to contain malicious code. Source: ghsa-malware 836f393eb6f0f8e726f2a49d47785c31473723f76d1f6a6e6e2d6d75e53e5dd...

MAL-2025-190930 Malicious code in @ensdomains/durin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dcacde55c5201c366d199c830f210e3b126c9d1569c7c9a169bf40f8a3e13f The package @ensdomains/durin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190864 Malicious code in ra-data-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e18e2fda31999ba999f5629853253dd8ff93b75237944d8c2971c2f54381cc13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-190852 Malicious code in n8n-nodes-tmdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a791d5a6c99e04f00686606d40149f2ab7c17572f074de1dbb9ee62ab204aee The package n8n-nodes-tmdb was found to contain malicious code. Source: ghsa-malware e992a5e0af57cdc4d581692395fdc7c00152c3b400d60f4c73f0bbc67949845d...

MAL-2025-190784 Malicious code in test-hardhat-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c58c4506524c992c75582a4ebe5865965b7bf58281bd247ee81b3b08731515 The package test-hardhat-app was found to contain malicious code. Source: ghsa-malware 03564b5c607dce5fdce1c0f5802eb5816a37d6f74acf0e5ae3624f6e9b2224...

MAL-2025-190697 Malicious code in exact-ticker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73836084382b05119a191e8cca9859cc6d1233d4438d1d89b016447c822b7a3 The package exact-ticker was found to contain malicious code. Source: ghsa-malware f79afea8081e5bfa7bd2122f78ff54b8eccb0c1516de1a9c14a19a3ca7d2ffa6 A...

MAL-2025-190691 Malicious code in @zapier/secret-scrubber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109e973086267fe5b99a110c559267a26254a0bb87dcffbaf3fb69ea4bbca75 The package @zapier/secret-scrubber was found to contain malicious code. Source: ghsa-malware...

Fluent Bit 安全漏洞

Fluent Bit is an open source log processing and analysis system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from not properly cleaning up tagged values, which could lead to a path traversal attack that allows files to be written to unintended...

CVE-2025-13051

When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service. Upon service restart, the malicious DLL is loaded and executed under the LocalSystem account, resulting in...

CVE-2025-34323

Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo misconfiguration and group-writable application directories. The 'www-data' user is a member of the 'nagios' group, which has write access to...

CVE-2024-25621

containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...

dotnet: .NET Denial of Service Vulnerability

A flaw was found in MSBuild’s temporary directory handling on Linux where predictable, non-randomized temporary paths are used. Local users can create or manipulate those paths before MSBuild runs, causing build failures or unexpected behavior and resulting in denial of service for build operatio...

SUSE CVE-2024-25621

containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...

EUVD-2025-38266

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5. and previous versions...

CVE-2025-60242

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Anatoly Download Counter download-counter allows Path Traversal.This issue affects Download Counter: from n/a through = 1.4...

AZL-69815 CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13

containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...