MAL-2025-32634 Malicious code in sagitta-package-subscription-google (npm)

The package sagitta-package-subscription-google was found to contain malicious code...

MAL-2025-19446 Malicious code in electron-builder-wolf-subscription-xml (npm)

The package electron-builder-wolf-subscription-xml was found to contain malicious code...

MAL-2025-39025 Malicious code in webpack-lepton-xenos-subscription (npm)

The package webpack-lepton-xenos-subscription was found to contain malicious code...

MAL-2025-34332 Malicious code in sync-subscription-foundation-procyon (npm)

The package sync-subscription-foundation-procyon was found to contain malicious code...

MAL-2025-34146 Malicious code in subscription-cross-env-dione-protractor (npm)

The package subscription-cross-env-dione-protractor was found to contain malicious code...

MAL-2025-31412 Malicious code in quito-subscription-gridsome-airbnb (npm)

The package quito-subscription-gridsome-airbnb was found to contain malicious code...

MAL-2025-16463 Malicious code in callisto-subscription-selenology-cybernetics (npm)

The package callisto-subscription-selenology-cybernetics was found to contain malicious code...

MAL-2025-39092 Malicious code in weywot-subscription-mechatronics-miranda (npm)

The package weywot-subscription-mechatronics-miranda was found to contain malicious code...

MAL-2025-34147 Malicious code in subscription-futurology-transform-parcel (npm)

The package subscription-futurology-transform-parcel was found to contain malicious code...

MAL-2025-33895 Malicious code in standard-rehype-cosmiconfig-subscription (npm)

The package standard-rehype-cosmiconfig-subscription was found to contain malicious code...

MAL-2025-13989 Malicious code in accretion-vulcan-testcafe-subscription (npm)

The package accretion-vulcan-testcafe-subscription was found to contain malicious code...

MAL-2025-21351 Malicious code in geomorphology-leda-subscription-magellan (npm)

The package geomorphology-leda-subscription-magellan was found to contain malicious code...

CVE-2025-49221

Mattermost Confluence Plugin version 1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription details without via API call to GET subscription endpoint...

CVE-2025-54525

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body...

CVE-2025-53910

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint...

CVE-2025-44004

Mattermost Confluence Plugin version 1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint...

CVE-2025-54458

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint...

Announcing General Availability (GA) of Exchange Subscription Edition (SE) Release to Manufacturing (RTM)

None None...

Microsoft Exchange Server 输入验证错误漏洞

Microsoft Exchange Server is a set of e-mail service programs from Microsoft USA. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. An input validation error vulnerability exists in Microsoft Exchange Server that stems from incorrect inpu...

Microsoft Exchange Server 信息泄露漏洞

Microsoft Exchange Server is a set of e-mail service programs from Microsoft. It provides email access, storage, forwarding, voice mail, email filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to obta...