MAL-2025-27090 Malicious code in native-technocracy-astrobiology-hologram (npm)

The package native-technocracy-astrobiology-hologram was found to contain malicious code...

Malicious code in reatc-native-components (npm)

The package reatc-native-components was found to contain malicious code...

MAL-2025-31830 Malicious code in react-native-testing-log (npm)

The package react-native-testing-log was found to contain malicious code...

MAL-2025-31817 Malicious code in react-native-lib-teste (npm)

The package react-native-lib-teste was found to contain malicious code...

MAL-2025-25489 Malicious code in localz-lastmile-react-native-sdk (npm)

The package localz-lastmile-react-native-sdk was found to contain malicious code...

MAL-2025-31806 Malicious code in react-native-agnavigation (npm)

The package react-native-agnavigation was found to contain malicious code...

MAL-2025-27089 Malicious code in native-mongoose-hyperion-levels (npm)

The package native-mongoose-hyperion-levels was found to contain malicious code...

MAL-2025-31826 Malicious code in react-native-performance-navigation-drawer (npm)

The package react-native-performance-navigation-drawer was found to contain malicious code...

MAL-2025-31815 Malicious code in react-native-elemets (npm)

The package react-native-elemets was found to contain malicious code...

MAL-2025-31829 Malicious code in react-native-sims (npm)

The package react-native-sims was found to contain malicious code...

MAL-2025-31821 Malicious code in react-native-native-toast-library-2022 (npm)

The package react-native-native-toast-library-2022 was found to contain malicious code...

MAL-2025-34228 Malicious code in supervisor-spectroscopy-tardigrade-native (npm)

The package supervisor-spectroscopy-tardigrade-native was found to contain malicious code...

MAL-2025-31898 Malicious code in reatc-native-components (npm)

The package reatc-native-components was found to contain malicious code...

N-able N-central 安全漏洞

N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.3.1 that stems from the fact that...

CVE-2025-8859

A vulnerability was identified in code-projects eBlog Site 1.0. Affected by this vulnerability is an unknown functionality of the file /native/admin/save-slider.php of the component File Upload Module. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit...

CVE-2025-8859 code-projects eBlog Site File Upload save-slider.php unrestricted upload

A vulnerability was identified in code-projects eBlog Site 1.0. Affected by this vulnerability is an unknown functionality of the file /native/admin/save-slider.php of the component File Upload Module. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit...

BIT-LIBPHP-2024-8929 Leak partial content of the heap through heap buffer over-read in mysqlnd

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server...

BIT-LIBPHP-2022-31626 mysqlnd/pdo password buffer overflow

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can...

CVE-2025-8859: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in code-projects eBlog Site 1.0. Affected by this vulnerability is an unknown functionality of the file /native/admin/save-slider.php of the component File Upload Module. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit...

LitmusChaos 安全漏洞

LitmusChaos is a program open-sourced by Litmus Chaos that practices chaos engineering in a cloud-native manner. A security vulnerability exists in LitmusChaos 3.19.0 and earlier versions, which stems from improper handling of the parameter projectID, which could lead to improper control of...