MAL-2025-50639 Malicious code in vera-peyek48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6073fc534b9a7e2b4290fa0d2034adaff35af8c0318c03f6123f1ca7394143c The package vera-peyek48-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50020 Malicious code in candra-tempe33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78d4e755c9c0a7efdce38edb06dde36a38dacbc5b906cd4b286a2993c120c05 The package candra-tempe33-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50405 Malicious code in fajar-sambel40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca9c6587d4d84daa0288c9a84982392a9c855b6a8cf36859ca1f253ffe07361 The package fajar-sambel40-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in arif-kue51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8024c043775d225224a638d6aa61119d85eb7c8a6526865a5ece9d0dc7eda19e The package arif-kue51-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50089 Malicious code in cindy-keripik40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a666b8d392dfd806b471245acdea4c2f6b7a2deb5e55e8313bbac184d8e948 The package cindy-keripik40-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

PT-2025-46157

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description A missing VCS URL validation in JetBrains YouTrack allows delegation to unauthorized repositories through the Junie widget. This issue affects versions prior to 2025.3.104432...

Number withdrawal

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2025.3.104432, which...

Oracle Linux 9 : osbuild-composer (ELSA-2025-19594)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19594 advisory. 132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIR...

MAL-2025-49620 Malicious code in yanti-brengkes77-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd8c69a43df9dd9bfacffa3e182abc79ff26e4e88f21e007dcff4d8ae3fbe50 The package yanti-brengkes77-tititugel was found to contain malicious code...

Exploit for Reachable Assertion in Open5Gs

Open5GS-CVE-2025-41067-CVE-2025-41068-PoC This repository cont...

CLSA-2025-1762536892 git: Fix of CVE-2024-32020

CVE-2024-32020: refuse local clones of unowned repositories to prevent TOCTOU race conditions...

Malicious Package

Overview SqlDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Acunetix_vulnerability_assessment_tool

Acunetixvulnerabilityassessmenttool !imagehttp...

GHSA-FV2R-R8MP-PG48 Soft Serve does not sanitize ANSI escape sequences in user input

Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...

Soft Serve does not sanitize ANSI escape sequences in user input

Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...

CVE-2025-64109

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

GO-2025-4024 Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows...

GO-2025-4002 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd...

CVE-2025-64109

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

osbuild-composer security update

132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIRA: OLDIS-35893 - Refactor patches to fix some naming and set a correct kernel for Oracle Linux Orabug: 37253643 - Support using OCI...