GHSA-FMHH-RW3H-785M vulnerabilities

Vulnerabilities for packages: mattermost...

GHSA-4MCJ-8GVH-P753

creationtimestamp| type| source ---|---|--- 2025-05-15 19:33:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16546...

Malicious code in testqwee57985 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3598ee25e4c608f570194a3c2f83121f1978733f81ee019895ec855b7acd8a48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @support-editor/a0e50092.fcs.pw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee59e601418c129743ca46562e34ff738cb94622eb4ed6a44c5d949a282c7fb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-8JHR-WPCM-HH4H

creationtimestamp| type| source ---|---|--- 2025-05-14 23:33:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16433...

GHSA-RHV2-WFRR-4J2J

creationtimestamp| type| source ---|---|--- 2025-05-14 15:26:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114506885070033703...

GHSA-W9HF-35Q4-VCJW

creationtimestamp| type| source ---|---|--- 2025-05-13 19:31:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16215...

GHSA-X275-H9J4-7P4H

creationtimestamp| type| source ---|---|--- 2025-05-13 19:31:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16214...

GHSA-XJ5P-W2V5-FJM6

creationtimestamp| type| source ---|---|--- 2025-05-12 22:29:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16064...

Malicious code in util-buffers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26051aff776c128248d32f414e8919c5c3482b654403e6cd39478705581ae697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in voting-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf794ee7b143c582d6e666fee322ea82e99f42c967869b76953c90e12821c6a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-934X-XQ38-HHQF

creationtimestamp| type| source ---|---|--- 2025-05-08 20:23:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15613...

GHSA-63XR-GVJV-R6XV

creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15456...

GHSA-HCG3-Q754-CR77 vulnerabilities

Vulnerabilities for packages: ko, vcluster, bom, prometheus, fscrypt, kubernetes-dashboard-web, osv-scanner, spire-server, snyk-cli, xeol, step-ca, amazon-cloudwatch-agent-operator, authservice, crossplane-provider-aws-ec2, temporal, undock, crossplane-provider-aws-sqs, nri-kafka, azcopy,...

GHSA-G4R8-MP7G-85FQ

creationtimestamp| type| source ---|---|--- 2025-05-06 20:30:48+00:00| seen| Telegram/PwjyiTDmMCV8n5O4H8WYZUui8x-G-PcEgC06QwyqI9Pyxio...

GHSA-VR93-4VX7-332P

creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15180...

Malicious code in vite-plugin-remove (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c140227f254912a428a31e6c185e24d4d4098ac222b63955f3f6e7024d69941d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-HX5V-J59Q-C3J8

creationtimestamp| type| source ---|---|--- 2025-05-05 14:20:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14865...

GHSA-7X3Q-G6GQ-F4MM

creationtimestamp| type| source ---|---|--- 2025-05-03 23:18:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14708...

Fedora 40 : ntpd-rs (2025-66b73d6c72)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-66b73d6c72 advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...