1179 matches found
MAL-2025-50730 Malicious code in synqroomkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914da44da2183d035b344098fd0e5fe8c942b80666fa3cbcf855efc2b2239faf The package synqroomkit was found to contain malicious code. Source: ghsa-malware 55bfdc58beccccc6ae0646990cdc186d46c910ef90f5abdcf0c6e4d1d8b52024 An...
Fuji Electric Monitouch V-SFT-6 (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could crash the accessed device; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive...
Malicious code in durablefunctionsmonitor.react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f691cce925a79c73646d0f551524c208f9292c7a0257c1e768e81a5ed9b79ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-36121
IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
CVE-2025-36121
IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
MAL-2025-48773 Malicious code in add-module-exports (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c839bfd4379fee1d18fbca3447b73a811fda655fedf4480f2593d5d75149a421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-36121: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
Malicious code in frontend-layout (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd81764709c7d0f5174dd0a979519b3c85894302b3df75acedbf1de8500d3c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48174 Malicious code in redirect-j5blfb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053b01b4d218e109dc50a8ad0aa7fae9620964eac01e9ff6e495f6bf2056540e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48228 Malicious code in redirect-whb6rt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd0987c4c2d53a1a9a65785c5954913491bde650e384e279698367c4c8261ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-33407
A vulnerability has been found in Tenda W12 3.0.0.63948. The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out...
Malicious code in redirect-qrah57 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db917c85b5931f7072dbd29e85df939cac604bc86e6fa7800a29defb2b716c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48063 Malicious code in redirect-l0m7on (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f0c29bd299b19cfd665b1cc3de528b54629cf325cb6bf340e928a922f62f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47992 Malicious code in incommincentives (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f82fa02afa9a50bf4a03e925b89a63789fd1df25ff1031b9e6598f16b3880e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2020-17496
Malware in sbrugna...
EUVD-2019-0532
Malware in sbrugna...
EUVD-2017-16937
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2025-986169)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986169 advisory. A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd...
Malicious code in vishu_transitive_fn (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f90df0189636fa1988950e054ba609b79142c54a65e9cf18806db68cebf5d3 Any computer that has this package installed or running should be considered...