MAL-2025-191306 Malicious code in @quick-start-soft/quick-markdown-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e82ae5f39d0c568ce2ebb23ff053c97eba1c0bb306b946c3fefc4c0680b526 The package @quick-start-soft/quick-markdown-print was found to contain malicious code. Source: ghsa-malware...

CVE-2025-64660

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...

GHSA-X697-JF34-GP5X

creationtimestamp| type| source ---|---|--- 2025-11-21 18:39:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589142587853429 2025-11-22 21:17:53+00:00| seen| https://infosec.exchange/users/obivan/statuses/115595429345717232 2025-11-22 21:18:34+00:00| seen|...

GHSA-7HHV-H469-WC4Q vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-GGXQ-HP9W-J794

creationtimestamp| type| source ---|---|--- 2025-11-21 12:50:48+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3m65d3nacyr2q...

EUVD-2025-198368

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature over a network...

CVE-2025-64660

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...

CVE-2025-64660

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...

CVE-2025-64660 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2025-64660 GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

...

Command Injection

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Command Injection due to improp...

ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet

Oligo Security has warned of ongoing attacks exploiting a two-year-old security flaw in the Ray open-source artificial intelligence AI framework to turn infected clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet. The activity, codenamed ShadowRay 2.0 , is an evolution...

CVE-2019-19823

creationtimestamp| type| source ---|---|--- 2025-11-20 11:50:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-19823.yaml 2025-11-21 21:02:49+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbfleu2w...

CVE-2018-13317

creationtimestamp| type| source ---|---|--- 2025-11-20 11:49:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-13317.yaml 2025-11-21 21:02:46+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbabq42b...

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...

CVE-2017-14725

creationtimestamp| type| source ---|---|--- 2025-11-20 02:20:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-14725.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb2kbc2b...

CVE-2017-17092

creationtimestamp| type| source ---|---|--- 2025-11-20 02:12:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-17092.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb5cds25...

Exploit for CVE-2025-13390

WP Directory Kit /dev/null echo "+ Auto-login successful"...

PT-2025-47646

Name of the Vulnerable Software and Affected Versions GitHub Copilot and Visual Studio Code affected versions not specified Description An issue with access control exists in GitHub Copilot and Visual Studio Code. This allows an authorized attacker to bypass a security feature over a network...

CVE-2025-10703

creationtimestamp| type| source ---|---|--- 2025-11-19 17:40:56+00:00| seen| https://gist.github.com/Darkcrai86/18d5227339eca114b21530bced841b6c 2025-11-19 19:05:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yx3qs5tc2s...