MAL-2025-190605 Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190603 Malicious code in airbnb-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a37ecd19e914e8801e6398f69fea68500fc8c985d6bff3dc5613aaf0ea09692 The package airbnb-phoenix was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-64505

creationtimestamp| type| source ---|---|--- 2025-11-22 00:33:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/204 2025-11-22 01:59:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m66p54ip7t2h 2025-11-22 02:34:48+00:00| seen|...

CVE-2025-64720

creationtimestamp| type| source ---|---|--- 2025-11-22 00:33:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/204 2025-11-22 01:59:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m66p54ip7t2h 2025-11-22 02:34:48+00:00| seen|...

CVE-2025-65018

creationtimestamp| type| source ---|---|--- 2025-11-22 00:33:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/204 2025-11-22 01:59:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m66p54ip7t2h 2025-11-22 02:34:48+00:00| seen|...

UBUNTU-CVE-2025-65102

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...

UBUNTU-CVE-2025-13470

In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release...

Minder 安全漏洞

Minder is an open source platform that helps development teams and the open source community build more secure software and prove to others that the software they build is secure. A security vulnerability exists in Minder that stems from improper content acquisition and could lead to unauthorized...

StealthCup: Realistic, Multi-Stage, Evasion-Focused CTF for Benchmarking IDS

Intrusion Detection Systems IDS are critical to defending enterprise and industrial control environments, yet evaluating their effectiveness under realistic conditions remains an open challenge. Existing benchmarks rely on synthetic datasets e.g., NSL-KDD, CICIDS2017 or scripted replay frameworks...

MAL-2025-190595 Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/ld-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec551eb9431424b0e79cb127427880ebd5c21b9deb2b8d4a378fb650fb45a84 The package @ra-ide/ld-frontend was found to contain malicious code. Source: ossf-package-analysis...

OSV-SCALIBR 安全漏洞

OSV-SCALIBR is an open source software portfolio analysis library from Google. A security vulnerability exists in OSV-SCALIBR that stems from a file system traversal path error that could cause an application to crash...

Revive Adserver 安全漏洞

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

PT-2025-47603

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.2162 Description ClipBucket is a video sharing platform. A flaw in version 5.5.2 allows an attacker to control the server URL due to a dynamic build from the HTTP Host header when the base url configuration is...

Revive Adserver 安全漏洞

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

PT-2025-47814

Name of the Vulnerable Software and Affected Versions Minder Helm version 0.20241106.3386+ref.2507dbf Minder Go versions 0.0.72 through 0.0.83 Description Minder is an open source software supply chain security platform. Minder users may be able to retrieve content through the Minder server that...

zx 安全漏洞

zx is a Google open source tool for writing scripts. A security vulnerability exists in zx that stems from a logic error that could lead to the deletion of the external nodemodules directory...

Revive Adserver 安全漏洞

Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...

CVE-2025-65033

Rallly prior to 4.5.4 contains an authorization flaw in the poll management feature: polls are identified only by pollId, and ownership is not verified. This allows any authenticated user to pause or resume any poll, compromising integrity and availability. The issue has been patched in version 4...

EUVD-2025-198234

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference IDOR vulnerability allows any authenticated user to change the display names of other participants in polls without being an admin or the poll owner. By manipulating the...