Malicious code in @zalastax/nolb-passport-m (npm)

The package @zalastax/nolb-passport-m was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-m (npm)

The package @zalastax/nolb-hyperfunfluentui-emoji-m was found to contain malicious code...

Malicious code in m-backdoor (npm)

The package m-backdoor was found to contain malicious code...

Malicious code in typeface-m-plus-1p (npm)

The package typeface-m-plus-1p was found to contain malicious code...

MAL-2025-13464 Malicious code in @zalastax/nolb-qmuzik-m (npm)

The package @zalastax/nolb-qmuzik-m was found to contain malicious code...

MAL-2025-12281 Malicious code in @zalastax/nolb-m- (npm)

The package @zalastax/nolb-m- was found to contain malicious code...

MAL-2025-23988 Malicious code in judith-m (npm)

The package judith-m was found to contain malicious code...

MAL-2025-11822 Malicious code in @zalastax/nolb-gulp-m (npm)

The package @zalastax/nolb-gulp-m was found to contain malicious code...

MAL-2025-11661 Malicious code in @zalastax/nolb-google-m (npm)

The package @zalastax/nolb-google-m was found to contain malicious code...

MAL-2025-12291 Malicious code in @zalastax/nolb-m_ (npm)

The package @zalastax/nolb-m was found to contain malicious code...

MAL-2025-15152 Malicious code in avail-able-albu-m-down-load-54898-only-life-s3kh1-topcgy (npm)

The package avail-able-albu-m-down-load-54898-only-life-s3kh1-topcgy was found to contain malicious code...

H3C M2 NAS 安全漏洞

H3C M2 NAS is a home private cloud disk from China's Xinhua San H3C. A security vulnerability exists in H3C M2 NAS version V100R006, which originates in the Webserver Configuration component that could lead to unwanted privilege execution...

AZL-66230 CVE-2025-8844 affecting package nasm 2.16.01-2

A vulnerability was determined in NASM Netwide Assember 2.17rc0. This vulnerability affects the function parsesmacrotemplate of the file preproc.c. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

CVE-2025-48709

An issue was discovered in BMC Control-M 9.0.21.300. When Control-M Server has a database connection, it runs DBUStatus.exe frequently, which then calls dbuconnectiondetails.vbs with the username, password, database hostname, and port written in cleartext, which can be seen in event and process...

CVE-2025-48709

BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on Windows has a database connection on,...

CVE-2025-48709

BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on Windows has a database connection on,...

CVE-2025-48709 BMC Control-M/Server cleartext database credentials in process lists and logs

BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on Windows has a database connection on,...

CVE-2025-48709

CVE-2025-48709 affects BMC Control-M/Server 9.0.21.300, where credentials are stored in cleartext and exposed via process lists and logs. The root cause is the control path when a database connection is active: Control-M/Server runs DBUStatus.exe, which invokes dbu_connection_details.vbs with the...

CVE-2025-48709: Insertion of Sensitive Information into Log File

BMC Control-M/Server 9.0.21.300 displays cleartext database credentials in process lists and logs. An authenticated attacker with shell access could observe these credentials and use them to log in to the database server. For example, when Control-M/Server on Windows has a database connection on,...

PT-2025-32309

Name of the Vulnerable Software and Affected Versions BMC Control-M version 9.0.21.300 Description An issue exists where the Control-M Server, when connected to a database, frequently runs DBUStatus.exe. This process then calls dbu connection details.vbs, passing the username, password, database...