Malicious code in ethereum-ens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874848c97832c07d7093bf8c59c73549a0f9b8c2ecffeab4d33a5c3fbcfb6a4a The package ethereum-ens was found to contain malicious code. Source: ghsa-malware 08b4862efdbd7fabbe626b338824bea3a86cdb7a190c176ab6ddc665f9ecf080 A...

Malicious code in @ensdomains/cypress-metamask (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19427e64315a085f7001dff6a896730aa4cce33cf679f6a2da0a8bc61e96fb58 The package @ensdomains/cypress-metamask was found to contain malicious code. Source: ghsa-malware...

EUVD-2020-0255

Malware in sbrugna...

EUVD-2023-44309

Malicious code in bioql PyPI...

EUVD-2024-16106

Malicious code in bioql PyPI...

CVE-2025-5967

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data...

CVE-2025-5967

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data...

CVE-2025-5967

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data...

CVE-2025-5967

CVE-2025-5967 is a stored cross-site scripting vulnerability in Trellix ENS HX 10.0.4. The issue allows an attacker to inject arbitrary HTML into the Malware Scan Name field, which can lead to exposure of sensitive data. Affected product is Trellix Endpoint Security HX, version 10.0.4; the root c...

CVE-2025-5967

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data...

PT-2025-27505 · Mcafee · Ens Hx

Name of the Vulnerable Software and Affected Versions: ENS HX version 10.0.4 Description: A stored cross-site scripting issue allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data. Recommendations: For ENS HX version...

CVE-2025-5967: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the ENS HX Malware Scan Name field, resulting in the exposure of sensitive data...

CVE-2024-0310

A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header parameter setting to switch the content security policy into report-only mode, allowing an attacker to bypass the content-security-policy...

CVE-2020-5232

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

Malware in ens-app-v2

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ens-austt (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11346 Malicious code in ens-austt (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10884 Malicious code in ens-app-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3332aa2e460c5078abc70574b16848871805818907149c50a3d7842e2a93007d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ens-app-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3332aa2e460c5078abc70574b16848871805818907149c50a3d7842e2a93007d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The Spanish National Security Framework (ENS) is Now Part of the Qualys Enterprise TruRisk™ Platform

The Spanish National Security Framework ENS, regulated by Royal Decree 311/2022 , is a mandatory framework designed to ensure an optimal level of security for the digital infrastructure of companies in the Spanish public sector and critical infrastructures. Its main objective is to establish a...