MAL-2025-3025 Malicious code in saur-viseau-state-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5177f6ec88bdbe5b5ecb0090909b1b13e16b2ba974aa8368dcc58de28cf1d7dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30095

VyOS 1.3 through 1.5 fixed in 1.4.2 or any Debian-based system using dropbear in combination with live-build has the same Dropbear private host keys across different installations. Thus, an attacker can conduct active man-in-the-middle attacks against SSH connections if Dropbear is enabled as the...

PT-2025-13821 · Zitadel · Zitadel

Name of the Vulnerable Software and Affected Versions: Zitadel versions prior to 2.63.9 Zitadel versions prior to 2.64.6 Zitadel versions prior to 2.65.7 Zitadel versions prior to 2.66.16 Zitadel versions prior to 2.67.13 Zitadel versions prior to 2.68.9 Zitadel versions prior to 2.69.9 Zitadel...

VyOS 安全漏洞

VyOS is a fully open source enterprise router platform from VyOS Open Source. A security vulnerability exists in VyOS versions 1.3 through 1.5 that stems from the same Dropbear private key in different installations, which could lead to a man-in-the-middle attack against SSH connections...

MAL-2025-2780 Malicious code in pplinkpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b566f3227061147ddef30f6d4a452cec55caaf2812bfb5c44272f114fe21656 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postp2ptxnserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 477ef7e3eb9c560cf3beb43e8d618ba59ac783c7b0e17c6c2c1dba4c7050c38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2771 Malicious code in loka12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9aed27d2cda9232f5a1f5f6f5617f80af2d0d78ee5005efbbb3aff0b587ab4c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecko-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a46943965c7587fa7324d2b2470423dd46497cf100d65a55135a1a3c01ef79c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2747 Malicious code in chai-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e5e72069ba26720347311e7e7b22423d276dea2bb108ac5fb162bb4312e4ccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts

Cybersecurity researchers have discovered several cryptocurrency packages on the npm registry that have been hijacked to siphon sensitive information such as environment variables from compromised systems. "Some of these packages have lived on npmjs.com for over 9 years, and provide legitimate...

MAL-2025-2741 Malicious code in @takamol/qiwa-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a7c1ac0d47b523e1de684384da892f0683a8d543b56659127eb98ea88c1466a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-13554 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: This issue is an information disclosure problem that leaks sensitive details, such as API keys and system configurations, which could provide attackers with the necessary information to laun...

The vulnerability of the KEYS component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the KEYS component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the findasymmetrickey function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

lunary information disclosure vulnerability (CNVD-2025-08308)

lunary is lunary open source a production toolkit for LLM . An information disclosure vulnerability exists in lunary that stems from a GET /projects API endpoint exposing all project public and private API keys to users with least privileges, which can be exploited by an attacker to obtain...

CVE-2025-30353

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.5.0, when a Flow with the "Webhook" trigger and the "Data of Last Operation" response body encounters a ValidationError thrown by a failed condition operation, the A...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.10 LTS and 12.10.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

MAL-2025-2731 Malicious code in ethers-provider2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64291b6905fba089a2dada5e0215c20954bf12f15f76d27c5c341d2b91baa81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30353 Directus's webhook trigger flows can leak sensitive data

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.5.0, when a Flow with the "Webhook" trigger and the "Data of Last Operation" response body encounters a ValidationError thrown by a failed condition operation, the A...

Sensitive Information Disclosure

LiteLLM is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper error handling due to an issue in proxyserver.py that leaks Langfuse API keys when an error occurs while parsing team settings, potentially exposing full access to stored requests...

kernel security update

5.14.0-503.34.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...