CVE-2024-13849

creationtimestamp| type| source ---|---|--- 2025-02-20 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgl4rq2y 2025-02-20 13:08:54+00:00| seen| https://t.me/cvedetector/18523...

MAL-2025-1388 Malicious code in zmcrypty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee24745300aa11ed0e92813032e7269a17e9c66f73b03ac3e38e6bd613268e1c The OpenSSF Package Analysis project identified 'zmcrypty' @ 66.6.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-12013

creationtimestamp| type| source ---|---|--- 2025-02-13 16:04:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113997425586155705 2025-02-13 18:50:45+00:00| seen| https://t.me/cvedetector/18037...

CVE-2025-25202

creationtimestamp| type| source ---|---|--- 2025-02-11 19:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwenfmpuu2d 2025-02-11 21:33:23+00:00| seen| https://t.me/cvedetector/17734 2025-02-11 22:07:59+00:00| published-proof-of-concept|...

Fortinet FortiPortal security vulnerability

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs. A security vulnerability exists in Fortinet FortiPortal that stems from improper parsing ...

DeepSeek-R1 LLM Fails Over Half of Jailbreak Attacks in Security Analysis

DeepSeek-R1 LLM fails 58% of jailbreak attacks in Qualys security analysis. Learn about the vulnerabilities, compliance concerns, and risks for enterprise adoption...

CVE-2025-20185

creationtimestamp| type| source ---|---|--- 2025-02-05 16:36:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113952253499265593 2025-02-05 17:16:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh36kj54x2h 2025-02-05 19:09:07+00:00| seen|...

DeepSeek Failed Over Half of the Jailbreak Tests by Qualys TotalAI

A comprehensive security analysis of DeepSeek 's flagship reasoning model reveals significant concerns for enterprise adoption. Introduction DeepSeek-R1, a groundbreaking Large Language Model recently released by a Chinese startup, DeepSeek, has captured the AI industry’s attention. The model...

CVE-2025-0065

creationtimestamp| type| source ---|---|--- 2025-01-28 10:23:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113905487848074528 2025-01-28 11:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsdbqlg7r2n 2025-01-28 12:00:20+00:00| seen|...

CVE-2025-21564

Oracle Agile PLM Framework (Oracle Supply Chain) is affected in version 9.3.6, specifically the Agile Integration Services component. The CVE entry describes an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to obtain unauthorized access to critic...

CVE-2025-21508

CVE-2025-21508 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected versions are prior to 9.2.9.0. The vulnerability allows a low-privileged, unauthenticated attacker with network access over HTTP to cause a hang or frequent crashes (complete denial ...

Malicious code in chipped (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b4d484b6a0b05dde597bbc9ba800eec0c201e3fc81387511d009ae01d5e07b3 The OpenSSF Package Analysis project identified 'chipped' @ 1.1.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-12070 Malicious code in yb2bacceleratorstorefront-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6b9ec48a872ef195c69f3ecee359b142d1f9bb683a236c67a0c96876efafd0 The OpenSSF Package Analysis project identified 'yb2bacceleratorstorefront-web' @ 1.0.0 npm as malicious. It is considered malicious because: -...

CVE-2024-54101

creationtimestamp| type| source ---|---|--- 2024-12-12 11:44:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113639676531469272...

Malicious code in @flutteruki-gaming/eslint-config-flutteruki-gaming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d4e889992a980c69235fc81b993e0417a4bf52dcb6e16a20b0c32e8cf3057fe The OpenSSF Package Analysis project identified '@flutteruki-gaming/eslint-config-flutteruki-gaming' @ 1.8.0 npm as malicious. It is considered...

CVE-2024-12015

creationtimestamp| type| source ---|---|--- 2024-12-02 13:31:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113583475655174182...

ProjectSend R1605 Unauthenticated Remote Code Execution Exploit

This Metasploit module exploits an improper authorization vulnerability in ProjectSend versions r1295 through r1605. The vulnerability allows an unauthenticated attacker to obtain remote code execution by enabling user registration, disabling the whitelist of allowed file extensions, and uploadin...

Malicious code in unity-xlsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c00dae819c9f67995c5364676a4b71e58196df002687ac1e333816c86e0bd53d The OpenSSF Package Analysis project identified 'unity-xlsx' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

EN Is a Proof of Concept PoC script to check for vulnerabil...

Malicious code in ui-extensions-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612535ed853f3bcea44a30e8568888db73a09aa577ffd88994bf21ea077c985a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...