Malicious code in webpack-compilejsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8c67f3bbe4e8eda380dcbe093fc343b501dc38045f134cb5803093a91b9f48f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-62772

On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases...

Exploit for Out-of-bounds Write in Mediatek Software_Development_Kit

What is Registry Exploit? Phantom-Registry-Exploit-Cve2025-20...

Malicious code in funny-pad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc3cde1ae2412402edab8edbe484702139f4baa345143fb9973baaf3a947f242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48543 Malicious code in artyfact-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e7943603e230dc9bc1cd9f5f44133fe1b4fee90cb69929ae4b0308b61400753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hash-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 797126e9eb0f67390ff12806c31b6cca28e65c31d1eb9b186dbb591b0db9c941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0, <=4.0.1), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0, <=4.0.1) +32 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (>=4.0.0, <=4.0.1)

org.apache.syncope.core:syncope-core-spring MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2025-57738https://vulners.com/cve/CVE-2025-577...

org.apache.syncope.core.am:syncope-core-am-logic (>=4.0.0, <=4.0.1), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=4.0.0, <=4.0.1) +36 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-persistence-api (>=4.0.0, <=4.0.1)

org.apache.syncope.core:syncope-core-persistence-api MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2025-57738 Source advisory: SNYK:JAV...

org.apache.syncope.core.am:syncope-core-am-logic (>=3.0.0-m0, <=3.0.13), org.apache.syncope.core.am:syncope-core-am-rest-cxf (>=3.0.0-m0, <=3.0.13) +38 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-persistence-api (>=3.0.0-m0, <=3.0.13)

org.apache.syncope.core:syncope-core-persistence-api MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.13 and more Source cves: CVE-2025-57738http...

Improper Isolation or Compartmentalization

Overview Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization of Groovy code provided by delegated administrators. A privileged attacker can execute arbitrary code remotely by providing malicious Groovy implementations that are loaded and executed by the...

org.apache.syncope.core:syncope-core-logic (2.1.4), org.apache.syncope.core:syncope-core-persistence-jpa (2.1.4) +25 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.1.4)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.1.4 -...

org.apache.syncope.core:syncope-core-logic (2.0.4), org.apache.syncope.core:syncope-core-migration (2.0.4) +17 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.4)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.4 -...

org.apache.syncope.core:syncope-core-logic (2.0.2), org.apache.syncope.core:syncope-core-migration (2.0.2) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.2)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.2 -...

org.apache.syncope.core:syncope-core-logic (2.0.1), org.apache.syncope.core:syncope-core-migration (2.0.1) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.1)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.1 -...

org.apache.syncope.core:syncope-core-logic (2.0.0), org.apache.syncope.core:syncope-core-migration (2.0.0) +8 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.0)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.0 -...

org.apache.syncope.core:syncope-core-logic (2.0.0-m2), org.apache.syncope.core:syncope-core-persistence-jpa (2.0.0-m2) +7 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.0-m2)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.0-m2 -...

org.apache.syncope.core:syncope-core-logic (2.0.12), org.apache.syncope.core:syncope-core-migration (2.0.12) +24 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.12)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.12 -...

org.apache.syncope.core:syncope-core-persistence-jpa (2.1.8), org.apache.syncope.core:syncope-core-persistence-jpa-json (2.1.8) +12 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.1.8)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-persistence-jpa 2.1.8 -...

org.apache.syncope.core:syncope-core-persistence-jpa (2.1.7), org.apache.syncope.core:syncope-core-persistence-jpa-json (2.1.7) +12 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.1.7)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-persistence-jpa 2.1.7 -...

org.apache.syncope.core:syncope-core-logic (2.0.7), org.apache.syncope.core:syncope-core-migration (2.0.7) +20 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.7)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.7 -...