9694 matches found
MAL-2025-42153 Malicious code in moodle-core-tooltip (npm)
The package moodle-core-tooltip was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 216ce2e3393fb5bd909da3707f9792e6b59a5c3697c11bd0bb132828e48a4b89 Any computer that has this package installed or running should be considered fully...
Malicious code in tailwind-react-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Baidu.com Windows Client Remote Command Execution Vulnerability
BaiduNetdisk BaiduNetdisk is a cloud-based platform that provides file storage, synchronization and sharing services. Users can store their personal files through BaiduNetdisk and can share files by linking or inviting others. BaiduNetdisk also provides a file synchronization feature that allows...
VulnCheck KEV: CVE-2025-42957
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating...
CVE-2025-56498
The CVE-2025-56498 entry concerns the PLDT WiFi Router Prolink PGN6401V (Firmware 8.1.2) web management interface. The vulnerability resides in the ping6.asp page, where the pingAddr parameter is sent to /boaform/formPing6 without proper sanitization, enabling an authenticated attacker to inject ...
Malicious code in document-metadata (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310a04e0fbc7e2ba328f1b392655733ca387093a2e627dfdcc6beec46521cd3a Any computer that has this package installed or running should be considered...
Malicious code in react-native-wm-barcode (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d41cd8af4fc659204e641358eda189dac7d136a2918f8cec5c945431ced9a512 Any computer that has this package installed or running should be considered...
CVE-2025-30278
An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central...
CVE-2025-52856
The CVE-2025-52856 vulnerability affects QNAP VioStor. Description confirms an improper authentication flaw that could allow a remote attacker to compromise the system. The issue is addressed in VioStor 5.1.6 build 20250621 and later, which GPT notes as the fixed version. Connected sources consis...
CVE-2025-52856 VioStor
An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later...
CVE-2024-46917
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g.,...
USN-7726-3 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NTFS3 file system; - Network traffic control; CVE-2024-27407, CVE-2024-57996, CVE-2025-37752, CVE-2025-38350...
Malicious code in com.db.internetportal.es.olb-crossover-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d663acd7f33114b8fd15402308edcdbf8546ceeaf53aec128737ac8b324f4ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROS-20250827-05
A vulnerability in the Perl programming language is related to generating cnonce insecurely. Exploiting the vulnerability could allow an attacker to compromise the target system...
CVE-2025-27714
An attacker could exploit this vulnerability by uploading arbitrary files via the a specific endpoint, leading to unauthorized remote code execution or system compromise...
CVE-2025-24489
An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to system compromise...
Malicious code in cld-ai-chatbot-web (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47807a9125d00d52f4b02cf9742fdd7efd42b3b9cc93d5091594127fa5c9771c Any computer that has this package installed or running should be considered...
Malicious code in umaaas-api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cec98abf15f63bd69dc44f75e78cdab2f723a55c247ccb4ca535421407062c18 Any computer that has this package installed or running should be considered...
Malicious code in google-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a306188997a3decdf3eb0566e9ec1b3f81c5b1e0b4269eff69342744a9bad64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
