CVE-2025-2975

creationtimestamp| type| source ---|---|--- 2025-03-31 04:54:41+00:00| seen| https://bsky.app/profile/potato.software/post/3llnkvw4tke2r 2025-03-31 07:28:40+00:00| seen| https://t.me/cvedetector/21540 2025-03-31 16:33:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/969...

MAL-2025-2805 Malicious code in @sas-dvr/ltjs-gtl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 590d9654b9fef2a4c23a65543bd772d8aa4c0b3262912a102d66720d6cd50b78 The OpenSSF Package Analysis project identified '@sas-dvr/ltjs-gtl' @ 132.0.0 npm as malicious. It is considered malicious because: - The packag...

Ubuntu: Security Advisory (USN-7391-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7387-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-3436 Malicious code in bitcoinlib-dev (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a198ee5e2df9c67dcbd24ed19a8fec5d462bbb3c0eb474cf00cd299e75074ef5 It overwrites the 'clw' command from legit bitconinlib package and attempts to exfiltrate its database on the usage. As a context, it appears to be created to...

MAL-2025-2800 Malicious code in eqbank (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cb4c6c3534c2743f4bda73f51a773076db5813a4a72f7117d73feb0475ce70c The OpenSSF Package Analysis project identified 'eqbank' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicate...

BELL-CVE-2025-21873

Bulletin has no description...

BELL-CVE-2025-21870

Bulletin has no description...

BELL-CVE-2023-53011

Bulletin has no description...

BELL-CVE-2023-53013

Bulletin has no description...

BELL-CVE-2023-53008

Bulletin has no description...

BELL-CVE-2023-52991

Bulletin has no description...

BELL-CVE-2023-52978

Bulletin has no description...

BELL-CVE-2023-53009

Bulletin has no description...

BELL-CVE-2025-21888

Bulletin has no description...

BELL-CVE-2023-52979

Bulletin has no description...

BELL-CVE-2025-21881

Bulletin has no description...

GHSA-GFHV-5RQH-7QX3 ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...

GHSA-P736-G6PG-HJHW ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF via image upload function...

Security Bulletin: Vulnerability in Oracle Java affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Oracle Java has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...