MAL-2025-39264 Malicious code in wicked-external-roblox (npm)

The package wicked-external-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-32848 Malicious code in scv-external-telephony-sfdx-app (npm)

The package scv-external-telephony-sfdx-app was found to contain malicious code...

MAL-2025-39263 Malicious code in wicked-external-fivem (npm)

The package wicked-external-fivem was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in scv-external-telephony-sfdx-app (npm)

The package scv-external-telephony-sfdx-app was found to contain malicious code...

Malicious code in wicked-external-fivem (npm)

The package wicked-external-fivem was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @malware-test-genes-radon-taxis-reast/test-mlw3-genes-radon-taxis-reast (npm)

The package @malware-test-genes-radon-taxis-reast/test-mlw3-genes-radon-taxis-reast was found to contain malicious code...

MAL-2025-20105 Malicious code in external-api (npm)

The package external-api was found to contain malicious code...

MAL-2025-25440 Malicious code in lita-external (npm)

The package lita-external was found to contain malicious code...

CVE-2025-53769

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...

CVE-2025-5466

XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote authenticated attacker with admin privileges to trigger a denial of...

CVE-2025-26484

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2025-26484

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2025-26484

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2025-26484

Dell CloudLink (versions 8.0–8.1.1) has an improper restriction of XML External Entity Reference vulnerability. A high-privilege attacker with remote access could cause a Denial of Service. PT-2025-33286 recommends upgrading to a version later than 8.1.1 as the remediation. No exploitation detail...

CVE-2025-26484

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

Exploit for CVE-2020-11989

使用说明 首页 所见即所得，点击对应的按钮会跳转到相应的模块 渗透测试 网站扫描 网站扫描功能缝了afrog项目地址，基本就是差不多把该扫描器的功能UI化，且内置反连无需再配置ceye或jndi已将jndi有关poc全部替换成反连地址，主动探测的漏洞或者指纹会写入到report目录下的html文件中，并没有将afrog命令的输出进行删除（所以你在go run main.go运行工具时，依然能看到命令行存在afrog的输出内容） 目标格式支持 URL 或者 IP:PORT 仅指纹扫描/指纹POC扫描/主动指纹探测 - 仅指纹扫描：只对当前网页发送两个数据包进行探测指纹 - 主动指纹探测：...

Have You Turned Off Your Virtual Oven?

You check that the windows are shut before leaving home. Return to the kitchen to verify that the oven and stove were definitely turned off. Maybe even circle back again to confirm the front door was properly closed. These automatic safety checks give you peace of mind because you know the unlike...

CVE-2025-27388

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens...

CVE-2025-27388 Arbitrary URL Loading in WebView Leading to Token Leakage Risk

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens...

CVE-2025-27388

CVE-2025-27388 describes an issue where loading arbitrary external URLs through WebView components can inject malicious JavaScript to steal user tokens. The initial entry notes high impact (CVSS 4.0 base score 8.3) with NETWORK attack vector and high confidentiality impact. Connected documents co...