Malicious code in phi-orchestrate-cron-hash-function (npm)

The package phi-orchestrate-cron-hash-function was found to contain malicious code...

Malicious code in object-table-hash-private-enum (npm)

The package object-table-hash-private-enum was found to contain malicious code...

Malicious code in hash-sha256 (npm)

The package hash-sha256 was found to contain malicious code...

Malicious code in permission-parse-static-wind-hash (npm)

The package permission-parse-static-wind-hash was found to contain malicious code...

Malicious code in rain-scale-xi-hash-sed (npm)

The package rain-scale-xi-hash-sed was found to contain malicious code...

MAL-2025-29318 Malicious code in pipe-hash-minify-thread-char (npm)

The package pipe-hash-minify-thread-char was found to contain malicious code...

MAL-2025-28045 Malicious code in object-table-hash-private-enum (npm)

The package object-table-hash-private-enum was found to contain malicious code...

Malicious code in bundle-shell-hash-spy-import (npm)

The package bundle-shell-hash-spy-import was found to contain malicious code...

MAL-2025-29068 Malicious code in permission-parse-static-wind-hash (npm)

The package permission-parse-static-wind-hash was found to contain malicious code...

Malicious code in load-runtime-benchmark-hash-cluster (npm)

The package load-runtime-benchmark-hash-cluster was found to contain malicious code...

MAL-2025-22254 Malicious code in hash-spy-mock-web-sed (npm)

The package hash-spy-mock-web-sed was found to contain malicious code...

MAL-2025-31573 Malicious code in rain-scale-xi-hash-sed (npm)

The package rain-scale-xi-hash-sed was found to contain malicious code...

MAL-2025-14182 Malicious code in air-cron-moon-compress-hash (npm)

The package air-cron-moon-compress-hash was found to contain malicious code...

CVE-2025-54864

Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called by the corresponding forge without HTTP Basic authentication. Both forges do however feature HMAC signing with a secret key. Triggering an evaluation can be...

CVE-2025-42943

SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. For a successful attack, the attacker needs developer authorization in a specific Application Server ABAP to make changes in the code, and the victim needs to execute by using SAP...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero C...

Moderate: Red Hat Security Advisory: krb5 security update

An update for krb5 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2025-51691

Cross-Site Scripting XSS vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 May 2025 allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before renderin...

CVE-2025-54864

Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called by the corresponding forge without HTTP Basic authentication. Both forges do however feature HMAC signing with a secret key. Triggering an evaluation can be...

Linux Distros Unpatched Vulnerability : CVE-2025-37940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: Add condresched to ftracegraphsethash When the kernel contains a large number of functions that can be traced, the loop in ftracegraphsethash may take a...