MAL-2025-14315 Malicious code in alior-styles (npm)

The package alior-styles was found to contain malicious code...

Malicious code in alior-styles (npm)

The package alior-styles was found to contain malicious code...

MAL-2025-39385 Malicious code in wms-mobile-styles (npm)

The package wms-mobile-styles was found to contain malicious code...

MAL-2025-38023 Malicious code in ux-core-styles (npm)

The package ux-core-styles was found to contain malicious code...

Malicious code in ux-core-styles (npm)

The package ux-core-styles was found to contain malicious code...

Malicious code in next-styles (npm)

The package next-styles was found to contain malicious code...

Malicious code in kw-styles (npm)

The package kw-styles was found to contain malicious code...

Malicious code in eb-styles (npm)

The package eb-styles was found to contain malicious code...

MAL-2025-7067 Malicious code in @amber-team/remote-styles (npm)

The package @amber-team/remote-styles was found to contain malicious code...

MAL-2025-17432 Malicious code in common-styles (npm)

The package common-styles was found to contain malicious code...

MAL-2025-24843 Malicious code in kw-styles (npm)

The package kw-styles was found to contain malicious code...

MAL-2025-16008 Malicious code in botframework-webchat-styles (npm)

The package botframework-webchat-styles was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

WordPress plugin HT Mega 径遍历漏洞

WordPress HT Mega plugin is an Elementor page builder plugin designed for WordPress, offering over 100 custom widgets, 360+ preset modules, and a variety of templates for blogs, sliders, collapsible menus, and other page elements. A path traversal vulnerability exists in the WordPress HT Mega...

Malicious code in log-styles (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c86e8c217c9ecaf8f7718975790fccecd991a037b8764a08c4dd0754614a0c Any computer that has this package installed or running should be considered...

Malicious code in dropdown_styles.css (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-30145 GeoServer has an Infinite Loop Vulnerability in Jiffle process

GeoServer is an open source server that allows users to share and edit geospatial data. Malicious Jiffle scripts can be executed by GeoServer, either as a rendering transformation in WMS dynamic styles or as a WPS process, that can enter an infinite loop to trigger denial of service. This...

CVE-2025-30145 GeoServer has an Infinite Loop Vulnerability in Jiffle process

GeoServer is an open source server that allows users to share and edit geospatial data. Malicious Jiffle scripts can be executed by GeoServer, either as a rendering transformation in WMS dynamic styles or as a WPS process, that can enter an infinite loop to trigger denial of service. This...

CVE-2025-30145: Loop with Unreachable Exit Condition

GeoServer is an open source server that allows users to share and edit geospatial data. Malicious Jiffle scripts can be executed by GeoServer, either as a rendering transformation in WMS dynamic styles or as a WPS process, that can enter an infinite loop to trigger denial of service. This...

CVE-2023-23995

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tim Reeves & David Stöckl TinyMCE Custom Styles plugin = 1.1.2 versions...

CVE-2025-46340

Misskey is an open source, federated social media platform. Starting in version 12.0.0 and prior to version 2025.4.1, due to an oversight in the validation performed in UrlPreviewService and MkUrlPreview, it is possible for an attacker to inject arbitrary CSS into the MkUrlPreview component...