Deserialization Of Untrusted Data

org.apache.openmeetings,openmeetings-parent is vulnerable to Deserialization of untrusted data. The vulnerability is due to the lack of proper configuration for the openjpa.serialization.class.blacklist and openjpa.serialization.class.whitelist settings in the clustering instructions, allowing an...

MAL-2025-93 Malicious code in juytjwfgtrhefregfef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfb95249bd02721a1d338dc567e4158eff44610fba37a99a76e65e0744d3dc6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-82 Malicious code in data-planning-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fe067d2513628f7ed4c690b0cae73973b9e436a6947604ea1d714bd7c4a70b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reqests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42036342744aae89af66ec705147456c19ef5f7f242f7d91251ca0bac5fe12ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in olivergreen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93149667e62337ce494ebf287aeb4ab68a2b6b96fc9d32b5262d381771b539e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in daglavaa2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86db69121f626ba65cf72346dee7eda0b49516a7279168d161618ae3c9102203 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-3690

Name of the Vulnerable Software and Affected Versions WSO2 API Manager affected versions not specified Description The issue allows for unauthenticated account creation, potentially leading to a fully compromised system. It requires the WSDLs of admin services to be enabled first. Recommendations...

ROS-20250114-01

HTTP client aiohttp vulnerability is related to execution of a loop with an unreachable exit condition. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability of HTTP client aiohttp is related to a symbolic link issue in...

CVE-2025-23037 Cross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIA

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the control.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the...

Malicious code in jiolocate-ui (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 632763242c2df9c72854a919e8fd6a0c7a8b6debedb9c7e22cbd886883c4217b Any computer that has this package install...

Exploit for CVE-2024-53691

CVE-2024-53691 - https://www.qnap.com/en/security-advisory/qsa...

Malicious code in marked-ps (npm)

This package deploys Windows gh0strat malware via VBScript. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c33f4820622bde56fc1bf9394cd1a6d5af92c7099d9fc2ed247a512cfc480372 Any computer that has this package installed or running should be considered fully compromise...

ABB Drive Composer

SUMMARY An update is available that resolves vulnerability in the product versions as affected in this advisory. An attacker who successfully exploits the vulnerability could get unauthorized access to the file system on the host machine. This can lead to the execution of arbitrary code, data...

Malicious code in shopify-ecommerce-shopping-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a28c4bb6f1ccd57758357f7949eda10b66b8dcc6c7249a4b0756f28d5517369 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digitalexp-lowcode-runner-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff497f2370d8b4d0bbe77fb825c837cdd2a57a506ec952b2a4e3ba78f273d1b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52869

Certain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, mismanages groups. Specifically, when there is an operating system move from SUSE Enterprise Linux Server SLES 12 Service Pack SP 2 or 3 to SLES 15 SP2 on Teradata Database systems, some...

Teradata 安全漏洞

Teradata is a cloud analytics and data platform from Teradata, Inc. A security vulnerability exists in Teradata version 2024-11-04 and earlier, which stems from the incorrect administration of groups when the operating system is migrated from SUSE Enterprise Linux Server 12 SP2 or SP3 to SLES 15...

Ubuntu: Security Advisory (USN-7167-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-2937 · Suse +1 · Suse Linux Enterprise Server +1

Name of the Vulnerable Software and Affected Versions: Teradata versions prior to 2024-11-04 Description: The issue concerns the mismanagement of groups by certain Teradata account-handling code when used with SUSE Enterprise Linux Server. Specifically, during an operating system change from SUSE...