1333 matches found
Malicious code in elf-stats-merry-cookiejar-442 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2205b339fd0b3a3399f352d8e9c75db19fcaf3558a7482f55afea84733d5172 The package elf-stats-merry-cookiejar-442 was found to contain malicious code...
MAL-2025-192168 Malicious code in elf-stats-storybook-marshmallow-729 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9e1e445ab784bb20608d634e3d9e01c84179338478a75b8029624e3ac3b1dd The package elf-stats-storybook-marshmallow-729 was found to contain malicious code...
Malicious code in debug-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f2a76a5ede2df04c7d9b90d9fe0164f99a388aaf4ba018dc9b40f2b794d967 The package debug-common was found to contain malicious code...
Malicious code in react-native-retriable-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a3d5e2b867c8c149b9f1a79751ad5cfa9699fe24ec38d49770f9f80a37b3aa The package react-native-retriable-fetch was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-114848
Malicious code in cross-env-nodemon-sedna-local npm...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990883)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990883 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpievaluateobject may retu...
Malicious code in bayu-rangginang65-kyuki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0726e9435e14bed25be7a1396b8e7a4589630d9ca7af1bb7aa429659678e8ba2 The package bayu-rangginang65-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in synqroomkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914da44da2183d035b344098fd0e5fe8c942b80666fa3cbcf855efc2b2239faf The package synqroomkit was found to contain malicious code. Source: ghsa-malware 55bfdc58beccccc6ae0646990cdc186d46c910ef90f5abdcf0c6e4d1d8b52024 An...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989786)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989786 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...
sssd security update
2.9.4-5.0.2.3 - Missing ntohs to service port Orabug: 37389651 - Restore default debug level for ssscache Orabug: 32810448 2.9.4-5.3 - Resolves: RHEL-112455 - p11child currently has an infinite timeout rhel-8.10.z - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration...
Malicious code in dhpgemrdhs79029 (npm)
The package dhpgemrdhs79029 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-48723 Malicious code in ldhpgemrdhs84006 (npm)
The package ldhpgemrdhs84006 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
CVE-2025-62397 Moodle: router produces json instead of 404 error for invalid course id
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance...
EUVD-2025-35175
SQL injection vulnerability in the fields of warehouse document filtering form in SIMPLE.ERP software allows logged-in user to send a payload of up to 20 characters. Identified use case allows to delete tables with a name of maximum 6 characters. We weren't able to identify a way to exfiltrate da...
WordPress Reloadly plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Reloadly versions = 2.0.1...
CVE-2025-11603 code-projects Simple Food Ordering System editproduct.php sql injection
A vulnerability was found in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /editproduct.php. The manipulation of the argument Category results in sql injection. The attack may be launched remotely. The exploit has been made public and could be...
WordPress Enzy theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Enzy versions 1.6.4...
CVE-2025-52625: Use of Web Browser Cache Containing Sensitive Information
A vulnerability Cacheable SSL Page Found vulnerability has been identified in HCL AION. Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser This issue affects AION: 2.0...