MAL-2025-25472 Malicious code in load-runtime-benchmark-hash-cluster (npm)

The package load-runtime-benchmark-hash-cluster was found to contain malicious code...

MAL-2025-18716 Malicious code in down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy (npm)

The package down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy was found to contain malicious code...

MAL-2025-15147 Malicious code in avail-able-albu-m-down-load-38244-here-comes-science-ezvvi-tqkldb (npm)

The package avail-able-albu-m-down-load-38244-here-comes-science-ezvvi-tqkldb was found to contain malicious code...

MAL-2025-17458 Malicious code in compress-decrypt-load-kernel-delta (npm)

The package compress-decrypt-load-kernel-delta was found to contain malicious code...

MAL-2025-27877 Malicious code in nu-refactor-load-boolean-log (npm)

The package nu-refactor-load-boolean-log was found to contain malicious code...

MAL-2025-25471 Malicious code in load-lambda-fire-code-emulate (npm)

The package load-lambda-fire-code-emulate was found to contain malicious code...

MAL-2025-18707 Malicious code in down-load-available-zip-now-18341-x-xcib7-hnjfai (npm)

The package down-load-available-zip-now-18341-x-xcib7-hnjfai was found to contain malicious code...

MAL-2025-15140 Malicious code in avail-able-albu-m-down-load-2013-5888-false-idols-dclra-zgmhec (npm)

The package avail-able-albu-m-down-load-2013-5888-false-idols-dclra-zgmhec was found to contain malicious code...

MAL-2025-15131 Malicious code in ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu (npm)

The package ava-ilable-down-load-mp3-today-257706-but-id-rather-be-with-you-why9d-hoeovu was found to contain malicious code...

MAL-2025-15152 Malicious code in avail-able-albu-m-down-load-54898-only-life-s3kh1-topcgy (npm)

The package avail-able-albu-m-down-load-54898-only-life-s3kh1-topcgy was found to contain malicious code...

MAL-2025-25468 Malicious code in load-book-encrypt-deserialize-permission (npm)

The package load-book-encrypt-deserialize-permission was found to contain malicious code...

MAL-2025-18710 Malicious code in down-load-available-zip-now-47073-anita-qnknl-xgxkin (npm)

The package down-load-available-zip-now-47073-anita-qnknl-xgxkin was found to contain malicious code...

MAL-2025-18713 Malicious code in down-load-available-zip-now-in-evening-air-h64zx-skufkw (npm)

The package down-load-available-zip-now-in-evening-air-h64zx-skufkw was found to contain malicious code...

MAL-2025-20547 Malicious code in file-load-validate-cat-decode (npm)

The package file-load-validate-cat-decode was found to contain malicious code...

MAL-2025-25470 Malicious code in load-hot-info-delta-encode (npm)

The package load-hot-info-delta-encode was found to contain malicious code...

CVE-2025-50515

An issue was discovered in phome Empirebak 2010 in ebak2008/upload/class/config.php allowing attackers to execute arbitrary code when the config file was loaded...

CVE-2025-50515

An issue was discovered in phome Empirebak 2010 in ebak2008/upload/class/config.php allowing attackers to execute arbitrary code when the config file was loaded...

NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Flowise Custom MCP Remote Code Execution

This module exploits a remote code execution vulnerability in Flowise versions = 2.2.7-patch.1 and use exploit/multi/http/flowise/custommcprce msf undefinedcustommcprce show actions ...actions... msf undefinedcustommcprce set ACTION msf undefinedcustommcprce show options ...show and set options...

CVE-2025-8747

A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive...