MAL-2025-6553 Malicious code in myfuntools (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6532 Malicious code in karma-jasmine-sinon (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6514 Malicious code in graphalgo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6504 Malicious code in fastybird-triggers-module (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6464 Malicious code in blackspammerbd-termux (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6463 Malicious code in bitranox-coloredlogs (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6461 Malicious code in bavard-ml-common (PyPI)

--- -= Per source details. Do not edit below this line.=-...

GHSA-QR93-8WWF-22G4 GitProxy Approval Bypass When Pushing Multiple Branches

Summary This vulnerability allows a user to push to the remote repository while bypassing policies and explicit approval. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. Because it can allow policy violations to go undetected, w...

The Price of Poor Cybersecurity in 2024: US$3.1 Billion

...

CISCO-SA-20190513-SECUREBOOT

creationtimestamp| type| source ---|---|--- 2025-07-30 03:49:44+00:00| seen| https://gist.github.com/iseki0/cde82900ce5cf723909622f903fd261b...

Tableau Server 2023.3.x < 2023.3.19 / 2024.2.x < 2024.2.12 / 2025.1.x < 2025.1.3 Multiple Vulnerabilities (005105043)

The version of Tableau Server installed on the remote host is prior to 2023.3.19, 2024.2.12 and 2025.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the 005105043 and 005132575 advisories, including: - Improper Limitation of a Pathname to a Restricted Directory 'Path...

Insyde BIOS Vulnerabilities - Lenovo Support US

No description provided...

GO-2025-3783 OpenBao allows cancellation of root rekey and recovery rekey operations without authentication in github.com/openbao/openbao

OpenBao allows cancellation of root rekey and recovery rekey operations without authentication in github.com/openbao/openbao...

CVE-2025-8283

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be us...

PT-2025-31056 · Optimizely · Episerver Cms +2

Name of the Vulnerable Software and Affected Versions: Episerver CMS versions prior to 11.21.4 and EPiServer.CMS.UI versions prior to 11.37.5 Episerver CMS versions prior to 12.22.1 and EPiServer.CMS.UI versions prior to 11.37.3 Description: The Episerver Content Management System CMS by Optimize...

CVE-2025-0251

HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks...

CVE-2025-54416

CVE-2025-54416 – tj-actions/branch-names has a concrete command-injection flaw in the GitHub Action outputs. The vulnerability stems from unsafe use of the pattern echo "... $(eval printf "%s" …)" to populate GITHUB_OUTPUT, allowing an attacker-controlled branch or tag name to inject commands dow...

CVE-2025-54416 tj-actions/branch-names Contains Command Injection Vulnerability

tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...

CVE-2025-8176

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function gethistogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the publi...

MAL-2025-6318 Malicious code in testinghs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9769d7e7fcf228fd4f1667968ced173bd9ba1ea9f2476bd11055f71c461b832 Any computer that has this package installed or running should be considered...