MAL-2025-47603 Malicious code in filecoin-checker-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6196805b97dfa338fede5b1f871b87e26bfe4909ed5ac6a26c580e29f40cd85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 42 Update: rust-az-cvm-vtpm-0.7.4-3.fc42

Package with shared code for Azure Confidential VMs...

CVE-2025-20160

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required...

AppOpsControllerImpl Java Privilege Escalation

The vulnerability of the AppOpsControllerImpl.java module in Android operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

CVE-2025-59577

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Leveraging Race Conditions.This issue affects MasterStudy LMS: from n/a through = 3.6.20...

CVE-2025-20160

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required...

CVE-2025-20160

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required...

CVE-2025-20160

Cisco IOS and IOS XE TACACS+ vulnerability (CVE-2025-20160): the TACACS+ implementation fails to properly verify the configured shared secret, enabling unauthenticated remote attackers to read unencrypted TACACS+ messages or bypass authentication. This can lead to exposure of sensitive informatio...

CVE-2025-20160

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required...

Malware in @corp-ais/mychannel-shared-libs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-57602

Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH private key, allows remote attackers to authenticate to the cloud controller, gain interactive shell access, and pivot into other connected IoT devices. This can...

PT-2025-39296

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A flaw exists in the implementation of the TACACS+ protocol that may allow a remote attacker to view sensitive data or bypass authentication. The issue...

Cisco IOS和Cisco IOS XE Software 授权问题漏洞

Cisco IOS and Cisco IOS XE Software are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is a network operating system. An authorization issue vulnerability exists in Cisco IOS and Cisco IOS XE Software that stems from not...

SharedFileList Component Privilege Escalation

The vulnerability of the SharedFileList component in MacOS systems is related to the lack of authentication. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and gain increased privileges...

CVE-2025-0663

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...

CVE-2025-0663

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...

CVE-2025-0663

Summary: CVE-2025-0663 describes a cross-tenant authentication vulnerability in multiple WSO2 products due to a single cryptographic key used across all tenants to sign authentication cookies in Adaptive Authentication. This design flaw can allow a privileged user in one tenant to forge cookies f...

CVE-2025-59577 WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Leveraging Race Conditions.This issue affects MasterStudy LMS: from n/a through = 3.6.20...

CVE-2025-59577

CVE-2025-59577 is a race condition vulnerability in MasterStudy LMS WordPress plugin (versions up to 3.6.20). The issue is described as Concurrent Execution using a Shared Resource with Improper Synchronization, potentially enabling exploitation to affect review handling (Race Condition to Multip...

CVE-2025-57602

Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH private key, allows remote attackers to authenticate to the cloud controller, gain interactive shell access, and pivot into other connected IoT devices. This can...