Malicious code in aws-api-gateway-js-client (npm)

The package aws-api-gateway-js-client was found to contain malicious code...

MAL-2025-23324 Malicious code in iot-gateway-plugin-rtls (npm)

The package iot-gateway-plugin-rtls was found to contain malicious code...

MAL-2025-14212 Malicious code in airwallex-online-payments-gateway (npm)

The package airwallex-online-payments-gateway was found to contain malicious code...

MAL-2025-34675 Malicious code in temando-carrier-gateway (npm)

The package temando-carrier-gateway was found to contain malicious code...

Malicious code in gateway-query-parser (npm)

The package gateway-query-parser was found to contain malicious code...

Malicious code in airwallex-online-payments-gateway (npm)

The package airwallex-online-payments-gateway was found to contain malicious code...

MAL-2025-21202 Malicious code in gateway-query-parser (npm)

The package gateway-query-parser was found to contain malicious code...

Malicious code in tour-gateway (npm)

The package tour-gateway was found to contain malicious code...

Malicious code in temando-carrier-gateway (npm)

The package temando-carrier-gateway was found to contain malicious code...

Malicious code in gateway-ui (npm)

The package gateway-ui was found to contain malicious code...

MAL-2025-21203 Malicious code in gateway-ui (npm)

The package gateway-ui was found to contain malicious code...

MAL-2025-15222 Malicious code in aws-api-gateway-js-client (npm)

The package aws-api-gateway-js-client was found to contain malicious code...

MAL-2025-37111 Malicious code in tour-gateway (npm)

The package tour-gateway was found to contain malicious code...

CVE-2025-5456

A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a...

CVE-2025-5462

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a deni...

CVE-2025-5468

Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a local authenticated attacker to re...

CVE-2025-25235

Server-Side Request Forgery SSRF in Omnissa Secure Email Gateway SEG in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network traffic such as HTTP requests to internal networks...

New Brute-Force Campaign Hits Fortinet SSL VPN in Coordinated Attack

A surge in brute-force attacks on Fortinet products could signal a new vulnerability. A timeline shows a strong…...

CVE-2025-5468

Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a local authenticated attacker to re...

CVE-2025-5462

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 Fix deployed on 02-Aug-2025 allows a remote unauthenticated attacker to trigger a deni...