Malicious code in run-script-meissa-charon-sedna (npm)

The package run-script-meissa-charon-sedna was found to contain malicious code...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via run-serially (0.0.0)

run-serially NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...

MAL-2025-23437 Malicious code in isostasy-sirius-eventhoriz-run-script (npm)

The package isostasy-sirius-eventhoriz-run-script was found to contain malicious code...

MAL-2025-32557 Malicious code in run-after (npm)

The package run-after was found to contain malicious code...

MAL-2025-17874 Malicious code in cycle-monorepo-sandbox-most-run (npm)

The package cycle-monorepo-sandbox-most-run was found to contain malicious code...

MAL-2025-17876 Malicious code in cycle-monorepo-sandbox-rx-run (npm)

The package cycle-monorepo-sandbox-rx-run was found to contain malicious code...

MAL-2025-25762 Malicious code in magellan-non-blocking-run-script-bioinformatics (npm)

The package magellan-non-blocking-run-script-bioinformatics was found to contain malicious code...

MAL-2025-32565 Malicious code in run-serially (npm)

The package run-serially was found to contain malicious code...

MAL-2025-15895 Malicious code in blueshift-winston-run-script-jest (npm)

The package blueshift-winston-run-script-jest was found to contain malicious code...

MAL-2025-32558 Malicious code in run-dev (npm)

The package run-dev was found to contain malicious code...

MAL-2025-27524 Malicious code in nightwatch-nodejs-run-script-castor (npm)

The package nightwatch-nodejs-run-script-castor was found to contain malicious code...

Malicious code in browser-run (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b45aebce3647704ac54d30a38e86493e0246f9ea44131394f84628656ef00ed Package uses the name as popular NPM package https://www.npmjs.com/package/browser-run, but the only thing it does is adding a hardcoded public SSH key and the...

MAL-2025-191696 Malicious code in browser-run (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b45aebce3647704ac54d30a38e86493e0246f9ea44131394f84628656ef00ed Package uses the name as popular NPM package https://www.npmjs.com/package/browser-run, but the only thing it does is adding a hardcoded public SSH key and the...

Yet Another Mirage of Breaking MIRAGE: Debunking Occupancy-Based Side-Channel Attacks on Fully Associative Randomized Caches

Recent work presented at USENIX Security 2025 claims that occupancy-based attacks can recover AES keys from the MIRAGE randomized cache. In this paper, we examine these claims and find that they arise from fundamental modeling flaws. Most critically, the authors' simulation of MIRAGE uses a...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Aug 2025)

This host is missing a critical security update according to Microsoft Office Click-to-Run update August 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Description of the security update for Excel 2016: August 12, 2025 (KB5002758)

None None...

End of support for Office 2016 and Office 2019

None None...

PT-2025-32604 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP affected versions not specified Description: SAP NetWeaver Application Server for ABAP is susceptible to a cross-site scripting issue. An unauthenticated attacker can create a URL containing a malicio...

Linux Distros Unpatched Vulnerability : CVE-2021-32635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, singularity action commands run/shell/exec...