MAL-2025-3237 Malicious code in eigenlayer-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dcbc6398c70af4eea7bcb6879aced4ed322d24aa860eff099e1054163764f2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3224 Malicious code in @bane-mlb/less-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708683cc4aa7a9a8a3e4e44563d46dd000b74ea5738e4aa8885e7f40e6990a53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3227 Malicious code in @x-mlbtv/client-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88def9d7e31808e260a5f82c41a69f93b73929927370a5fbf3821cbdfb2d5103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bane-mlb/less-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708683cc4aa7a9a8a3e4e44563d46dd000b74ea5738e4aa8885e7f40e6990a53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-17246 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.18 Description: A Remote Code Execution RCE vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionalit...

ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal

Exploit Title: ABB Cylon Aspect 3.08.02 ethernetUpdate.php - Authenticated Path Traversal Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.02 Summary: ASPECT is an award-winning scalable...

ROS-20250417-10

Vulnerability in Mozilla Firefox, Firefox ESR browsers and Thunderbird email client of operating systems Windows is related to a post-release usage error in XSLTProcessor. Exploitation of the vulnerability could allow an attacker acting remotely to compromise a vulnerable system...

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed multiple vulnerabilities in several products, including the Utilities Application Framework, WebLogic Server, and Fusion Middleware. The vulnerabilities allow unauthenticated malicious actors to gain access to critical data, cause denial-of-service DoS, and in some cases even gai...

MAL-2025-3214 Malicious code in @csds-web-components/csds-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae5a6c41775270cbe4eca04b93c31d39f47688db4b549ea73fed1157bf612c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ABB CoreSense HM and CoreSense M10

SUMMARY An update is available that resolves vulnerability in the product versions listed as affected in this advisory. A path traversal vulnerability in these products can allow unauthenticated users to gain access to restricted directories. Exploiting this vulnerability can lead to complete...

Siemens RUGGEDCOM APE1808 Multiple Vulnerabilities in Fortigate NGFW

The RUGGEDCOM APE1808 is a powerful utility-grade application hosting platform that allows you to deploy a range of commercial applications for edge computing and network security in harsh industrial environments. Siemens RUGGEDCOM APE1808 Fortigate NGFW has multiple vulnerabilities that can be...

Malicious code in flex-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004deff66b34b25158642a09f2766c44910f05ec7a322c2933f768f34249151b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3210 Malicious code in flex-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49eefd4354e4d8c5354eddd891739db212953f6cf5c4aa193bf5470a8e77c820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-31839

Name of the Vulnerable Software and Affected Versions: Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 Description: An unauthenticated OS command injection vulnerability exists in the device. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is...

CVE-2025-3114

Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandb...

Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-17556

Name of the Vulnerable Software and Affected Versions Commvault Command Center Innovation Release versions 11.38.0 through 11.38.19 Description A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded b...

CVE-2025-27079

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution RCE. Successful exploitation could allow an attacker to execute arbitrary operating system commands on the...

CVE-2025-27429

SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating...

CVE-2025-31330

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...