MAL-2025-50327 Malicious code in erick-mangut23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12261306ae7760f92a1ec99da157bcabafcaf041d2f0261fddd1e8c93aa63be6 The package erick-mangut23-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

EUVD-2025-40655

Malicious code in andi-papeda32-sluey npm...

EUVD-2025-39187

Malicious code in wati-kacang3-sluey npm...

EUVD-2025-40921

Malicious code in tomi-sego3-breki npm...

EUVD-2025-39997

Malicious code in dewanto-kue27-breki npm...

EUVD-2025-40128

Malicious code in cindy-ketoprak1-sluey npm...

EUVD-2025-40484

Malicious code in bayu-rangginang13-sukiwir npm...

Malicious code in yuni-sate78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb230a98a9d43161f95fcfbc6648b91032db7d52306034464ef9f6442c926f8 The package yuni-sate78-ruro was found to contain malicious code...

Malicious code in yuni-nasi3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975afb3d443e6de6d98cf0f41126a87e99818e2a9b4be92b98e10154671a167 The package yuni-nasi3-breki was found to contain malicious code...

MAL-2025-49556 Malicious code in zul-oblok39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a5ae8a15c1cdd8bcd1edce0af4020ebddef4e3714efbf6f460b21a1a9a3b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64486

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...

CVE-2025-12907

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...

EUVD-2025-38289

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

PT-2025-45448

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

CVE-2022-50593

creationtimestamp| type| source ---|---|--- 2025-11-06 21:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yjplah4a2b...

RHSA-2025:19835 Red Hat Security Advisory: bind security update

Bulletin has no description...

DEBIAN-CVE-2025-43430

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43335

CVE-2025-43335 is a macOS vulnerability addressed by Apple in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The issue involves a logic issue that could allow an app to access user‑sensitive data. Public records from NVD/Red Hat entries align on the fixed versions and the data e...

Mageia: Security Advisory (MGASA-2025-0254)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-44803

CVE-2025-45959 - No vulnerability title. CVE ID : CVE-2025-45959 Published : Nov. 3, 2025, 6:16 p.m. | 1 hour, 42 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a...