42432 matches found
MAL-2025-48590 Malicious code in baidu-tims (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8df1a41ee221825ba6e320bbed60cefc43c2254a86e89ff493988c7b5ee8ad3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48591 Malicious code in chalk-ipheriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14aef23722696ac10bcadbe24bba51c3dbdc0e9b1e0aa9477a91bc90d59cd48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mender-conductor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa35f37c40538fc027dc3f86e83c914f7285a8968a9811e5bbc8a5fc5b863da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48567 Malicious code in mender-artifact (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94134964d7a293444da55c5300ca285bae3eac4e6bf9a1f89cc1d9a94f2ceae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48588 Malicious code in useradm-enterprise (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce2bcbfbdffbf03bd25822f3d63f902505a6edc5efb3ef610fce41007b8620b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in create-artifact-worker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in deviceauth-enterprise (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81241adb2806e1b1d4e82b160d92edbdbec9ad3e8ba91dab321514de1f14fa75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-43742
CVE-2025-62828 - SAP SQL Injection CVE ID : CVE-2025-62828 Published : Oct. 24, 2025, 3:15 a.m. | 4 hours, 2 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
2025-10 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5070883)
2025-10 Cumulative Update for Windows Server 2019 for x64-based Systems KB5070883...
2025-10 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5070884)
2025-10 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems KB5070884...
2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5070882)
2025-10 Cumulative Update for Windows Server 2016 for x64-based Systems KB5070882...
Moderate: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
CVE-2025-62399
Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks...
CVE-2025-62395
A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...
CVE-2025-62401
An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...
CVE-2025-62396
An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...
CVE-2025-62688
creationtimestamp| type| source ---|---|--- 2025-10-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 2025-10-23 23:23:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3viwivzca2o...
GHSA-JJJJ-JWHF-8RGR vulnerabilities
Vulnerabilities for packages: minio...
