MAL-2025-892 Malicious code in zapzaperson (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-883 Malicious code in whatsapp-reader (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-874 Malicious code in system-remap (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-872 Malicious code in symlink_lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-825 Malicious code in elgato-webhid-jaas-demo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-807 Malicious code in bar_lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-779 Malicious code in @sn4k-s3c/call-home (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-777 Malicious code in @sanchezcoding/fetchs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-770 Malicious code in @im-dims/bail (npm)

--- -= Per source details. Do not edit below this line.=-...

DeepSeek Failed Over Half of the Jailbreak Tests by Qualys TotalAI

A comprehensive security analysis of DeepSeek 's flagship reasoning model reveals significant concerns for enterprise adoption. Introduction DeepSeek-R1, a groundbreaking Large Language Model recently released by a Chinese startup, DeepSeek, has captured the AI industry’s attention. The model...

Fake Reddit and WeTransfer Sites are Pushing Malware

There are thousands of fake Reddit and WeTransfer webpages that are pushing malware. They exploit people who are using search engines to search sites like Reddit. Unsuspecting victims clicking on the link are taken to a fake WeTransfer site that mimicks the interface of the popular file-sharing...

PT-2025-4395 · Vmware · Vmware Aria Operations For Logs

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations for Logs affected versions not specified Description: The issue is related to a stored cross-site scripting vulnerability. A malicious actor with non-administrative privileges may be able to inject a malicious script,...

CVE-2025-0840

A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

SUSE: Security Advisory (SUSE-SU-2025:0267-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenSC Multiple Vulnerabilities (Jan 2025) - Windows

OpenSC is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opensc-project:opensc"; if descripti...

Do We Really Need The OWASP NHI Top 10?

The Open Web Application Security Project has recently introduced a new Top 10 project - the Non-Human Identity NHI Top 10. For years, OWASP has provided security professionals and developers with essential guidance and actionable frameworks through its Top 10 projects, including the widely used...

BIT-NODE-2025-23087

Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...

BIT-NODE-2025-23089

Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...

CVE-2023-38716 IBM Cloud Pak System information disclosure

IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive information about the system that could aid in further attacks against the system...

PT-2025-2435 · Ibm · Ibm Maximo Application Suite

Name of the Vulnerable Software and Affected Versions: IBM Maximo Application Suite versions 8.10.12 through 9.1.0 Description: The issue is related to the Monitor Component of the IBM Maximo Application Suite, which fails to properly handle log output. This could allow a remote attacker to injec...