Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.5)

The version of AOS installed on the remote host is prior to 6.10.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.5 advisory. - virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic templa...

CVE-2025-25086

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Secret Meta facebook-secret-meta allows Reflected XSS.This issue affects Secret Meta: from n/a through = 1.2.1...

SUSE CVE-2025-1097

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the auth-tls-match-cn Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

SUSE CVE-2025-1098

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

SUSE CVE-2025-24513

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the container. This could result in denial of service, or...

MAL-2025-2746 Malicious code in agentbse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbc1a3323e35cbce1ddc24ab20a734247f6aaa56a638b8a7eb30c49b18e4278f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transactions-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware add05b58536e55e9dfed5253cce6ec918d905362b9e9d30531d1a20dd39aca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coin-address-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ceac65952acb06089cb8040976813b0ada891dc03e9728a0daff8b9e6242708 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in identitydocumentserv-multipart-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12bb417a686521f10c52162e16092d476b65d6b7679c76facfaa4655d2583908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2785 Malicious code in shipmentdetails-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9772823042f7d0864755c4a9eaa7cc42fedc152439eab6471b40fd5bf0b9d4e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mafid-prod-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ab349dc0f539992fdb9d4baf49cbe8b67efe4f92fc9e163454386aea92fee1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mc5-adidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a619866ee93765f22dfe1769c8a926d1b67e44fee683bd4cdf8d2da2b9a47f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2782 Malicious code in resolver-options (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68b3b87faef2aa88da0714f9641eef9b258d050775eb10ec9fac90abbae5d8b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2790 Malicious code in toc-generator-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78aba0f665dc55e94b5a5dc3b90ce2d371080c1acda0c4565429afcfb9ba4fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keradsdsdsdsddsdaaqw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffdf8162053f73e26b71136ed449d6a728245a6560bc2c49d7fbc7c52f773672 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in degate.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61da5754c936114c5ca17e69053e009e5977b17f1dcda28c83ab085d40b17811 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2742 Malicious code in @takamol/qiwa-env-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b86c910b37e0839cc34589794e9d597808f078c030da985d763aa3220ebd827 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @takamol/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b5584d88d529b51cf18b19dbc2c0944ee8b54e09fbe249eceb421fba596344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2738 Malicious code in @takamol/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b5584d88d529b51cf18b19dbc2c0944ee8b54e09fbe249eceb421fba596344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in macos-relese (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 398aca8803a64fcc22bd99f0a9ded72acd13a096dc268e6a30cabb2828066c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...