20586 matches found
Malicious code in shack-comet-9me2 (npm)
The package shack-comet-9me2 was found to contain malicious code...
Malicious code in yonder-repository-sirius-whitedwarf (npm)
The package yonder-repository-sirius-whitedwarf was found to contain malicious code...
Malicious code in axios-repository-markdownlint-electron-builder (npm)
The package axios-repository-markdownlint-electron-builder was found to contain malicious code...
MAL-2025-24327 Malicious code in karma-repository-request-helmet (npm)
The package karma-repository-request-helmet was found to contain malicious code...
MAL-2025-40596 Malicious code in yonder-repository-sirius-whitedwarf (npm)
The package yonder-repository-sirius-whitedwarf was found to contain malicious code...
MAL-2025-12294 Malicious code in @zalastax/nolb-mic6 (npm)
The package @zalastax/nolb-mic6 was found to contain malicious code...
MAL-2025-27142 Malicious code in nconf-galaxy-repository-cosmos (npm)
The package nconf-galaxy-repository-cosmos was found to contain malicious code...
MAL-2025-31408 Malicious code in quito-outercore-repository-perseus (npm)
The package quito-outercore-repository-perseus was found to contain malicious code...
MAL-2025-33576 Malicious code in soap-repository (npm)
The package soap-repository was found to contain malicious code...
MAL-2025-29084 Malicious code in perturbation-mui-repository-apollo (npm)
The package perturbation-mui-repository-apollo was found to contain malicious code...
CVE-2025-53789
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
Remediate WMI Class Corruption Errors with Qualys TruRisk™ Eliminate
When Windows Management Instrumentation WMI classes fail, it can disrupt critical security operations by causing vulnerability scans to miss important data and compliance reports to lack accuracy. These issues may lead to gaps in visibility, making it harder for security teams to maintain a...
Use of Uninitialized Resource
Overview github.com/helm/helm/pkg/repo is a package manager for kubernetes. Affected versions of this package are vulnerable to Use of Uninitialized Resource via improper validation when parsing Chart.yaml and index.yaml files. An attacker can cause a panic in the application by providing malform...
Use of Uninitialized Resource
Overview helm.sh/helm/v3/pkg/repo is a package manager for kubernetes. Affected versions of this package are vulnerable to Use of Uninitialized Resource via improper validation when parsing Chart.yaml and index.yaml files. An attacker can cause a panic in the application by providing malformed or...
PT-2025-34571 · Crates.Io · Scratchpad
The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...
m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials
Summary The steam-workshop-deploy github action does not exclude the .git directory when packaging content for deployment and provides no built-in way to do so. If a .git folder exists in the target directory e.g., due to a local Git repo, custom project structure, or via the actions/checkout...
GHSA-X6GV-2RVH-QMP6 m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials
Summary The steam-workshop-deploy github action does not exclude the .git directory when packaging content for deployment and provides no built-in way to do so. If a .git folder exists in the target directory e.g., due to a local Git repo, custom project structure, or via the actions/checkout...
CVE-2025-53789
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2025-53789
CVE-2025-53789 affects Windows StateRepository API where missing authentication enables local privilege escalation. The NCSC advisory references this CVE with CVSS 3.1/7.8 (High) and impact described as escalating privileges. No explicit affected product/version details or fix/remediation are pro...
