Malicious code in deciduous-vanilla-2dgn (npm)

The package deciduous-vanilla-2dgn was found to contain malicious code...

Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

MAL-2025-28556 Malicious code in oscar-sierra-victor-jkmeo (npm)

The package oscar-sierra-victor-jkmeo was found to contain malicious code...

Malicious code in @sellerly-kit/subscribe-notice (npm)

The package @sellerly-kit/subscribe-notice was found to contain malicious code...

Malicious code in raspberry-mdn-project (npm)

The package raspberry-mdn-project was found to contain malicious code...

MAL-2025-37344 Malicious code in tvquiz (npm)

The package tvquiz was found to contain malicious code...

MAL-2025-28598 Malicious code in osstracker (npm)

The package osstracker was found to contain malicious code...

MAL-2025-36810 Malicious code in thibault (npm)

The package thibault was found to contain malicious code...

MAL-2025-9312 Malicious code in @sellerly-kit/subscribe-notice (npm)

The package @sellerly-kit/subscribe-notice was found to contain malicious code...

MAL-2025-24591 Malicious code in kiwi-date-mango-rtcws (npm)

The package kiwi-date-mango-rtcws was found to contain malicious code...

MAL-2025-30457 Malicious code in project-q3fyl-quebec (npm)

The package project-q3fyl-quebec was found to contain malicious code...

CVE-2024-41985

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-06...

MINI-QFCW-M8JH-5QVM

Bulletin has no description...

CGA-6FQP-28J8-56WQ

Bulletin has no description...

Ubuntu 14.04 LTS / 16.04 LTS : cifs-utils vulnerabilities (USN-7688-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7688-1 advisory. Aurlien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly...

CVE-2025-8847

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is the function Edit of the file /system/notice/edit. The manipulation of the argument noticeTitle/noticeContent leads to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2025-8891 OceanWP <= 4.0.9 - 4.1.1 - Cross-Site Request Forgery to Ocean Extra Plugin Installation

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to missing or incorrect nonce validation on the oceanwpnoticebuttonclick function. This makes it possible for unauthenticated attackers to install the Ocean Extra plugin via a forge...

Debian: Security Advisory (DSA-5973-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-53741

creationtimestamp| type| source ---|---|--- 2025-08-12 16:01:32+00:00| seen| https://www.thezdi.com/blog/2025/8/12/the-august-2025-security-update-review 2025-08-13 11:25:07+00:00| seen| https://poliverso.org/objects/0477a01e-ff471c89-9928bd439ee1052f 2025-10-17 02:38:04+00:00| seen|...

WordPress Zakra Unauthorized Modification Vulnerability

WordPress Zakra is a WordPress theme known for its power, compatibility and lightweight design, suitable for creating personal blogs, business websites, WooCommerce stores and more. WordPress Zakra suffers from an unauthorized modification vulnerability that stems from a missing...