BIT-NODE-2025-23083

With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...

BIT-NODE-MIN-2025-23083

With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage...

BIT-NODE-2025-23090

Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083...

BIT-NODE-MIN-2025-23090

Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083...

INE Security Alert: Expediting CMMC 2.0 Compliance

Cary, North Carolina, 26th January 2025, CyberNewsWire...

Brave Software: Null Pointer Dereference by Crafted Response from AI Model

The Brave browser was affected by a null pointer dereference vulnerability caused by a crafted response from an AI model. The vulnerability was triggered when the user set a malicious endpoint as the AI model's server endpoint. The code handling the server response assumed a specific structure...

CVE-2025-0708

A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross site scripting. The attack can be...

CVE-2025-0708 fumiao opencms Add Model Management Page addOrUpdate cross site scripting

A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross site scripting. The attack can be...

CVE-2025-24578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ElementInvader ElementInvader Addons for Elementor allows DOM-Based XSS. This issue affects ElementInvader Addons for Elementor: from n/a through 1.3.0...

Malicious code in meli-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e9c43699ec25184387ef69493ea9408036e114da2e1501a93d9cc74e38df909a The OpenSSF Package Analysis project identified 'meli-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-558 Malicious code in meli-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e9c43699ec25184387ef69493ea9408036e114da2e1501a93d9cc74e38df909a The OpenSSF Package Analysis project identified 'meli-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b29ef5b7f91f403e3af36ebf885175b0589e5142149b466eae7e650ed71239 The OpenSSF Package Analysis project identified 'lyft-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-535 Malicious code in lyft-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b29ef5b7f91f403e3af36ebf885175b0589e5142149b466eae7e650ed71239 The OpenSSF Package Analysis project identified 'lyft-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-502 Malicious code in instacart-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0f156bd66bab53f207eefced759f8bacbfeaa07433a39282c23b0d3b9f816af The OpenSSF Package Analysis project identified 'instacart-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af949cfb5a5349e6685c85de7c1f23beb51e56c772e2c6f19ec5f00e0a87e407 The OpenSSF Package Analysis project identified 'godaddy-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0255f17a95ebab8a2dad34723e65be392d1d7bccd4bc5128ee0450c7ab67639 The OpenSSF Package Analysis project identified 'epicagames-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-448 Malicious code in epicagames-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0255f17a95ebab8a2dad34723e65be392d1d7bccd4bc5128ee0450c7ab67639 The OpenSSF Package Analysis project identified 'epicagames-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-401 Malicious code in bookingcom-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5c9dcb72053012a554271c8641e9b1e41f0457ce148e0b01794de89c9752b5d5 The OpenSSF Package Analysis project identified 'bookingcom-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5c9dcb72053012a554271c8641e9b1e41f0457ce148e0b01794de89c9752b5d5 The OpenSSF Package Analysis project identified 'bookingcom-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-430 Malicious code in dropbox-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecb4588479d4814adaeee8f5670d6fcdb9fa38e06a48ed99dd6ace3553a4ac24 The OpenSSF Package Analysis project identified 'dropbox-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...