16106 matches found
MAL-2025-40086 Malicious code in y-team-header (npm)
The package y-team-header was found to contain malicious code...
MAL-2025-9327 Malicious code in @silver-team/sm2kata (npm)
The package @silver-team/sm2kata was found to contain malicious code...
MAL-2025-7059 Malicious code in @amber-team/gatsby-plugin-semrush2 (npm)
The package @amber-team/gatsby-plugin-semrush2 was found to contain malicious code...
MAL-2025-7072 Malicious code in @amber-team/social-content-ai-widget (npm)
The package @amber-team/social-content-ai-widget was found to contain malicious code...
MAL-2025-7954 Malicious code in @frozen-team-qa/oti-service (npm)
The package @frozen-team-qa/oti-service was found to contain malicious code...
MAL-2025-7942 Malicious code in @frozen-team/eslint-config (npm)
The package @frozen-team/eslint-config was found to contain malicious code...
MAL-2025-7735 Malicious code in @crimson-team/semrush-auth (npm)
The package @crimson-team/semrush-auth was found to contain malicious code...
MAL-2025-9263 Malicious code in @protos-team/frontend-primitives (npm)
The package @protos-team/frontend-primitives was found to contain malicious code...
MAL-2025-7048 Malicious code in @amber-team/amazon-utils (npm)
The package @amber-team/amazon-utils was found to contain malicious code...
MAL-2025-8437 Malicious code in @lion-team/gcp-deploy (npm)
The package @lion-team/gcp-deploy was found to contain malicious code...
MAL-2025-7067 Malicious code in @amber-team/remote-styles (npm)
The package @amber-team/remote-styles was found to contain malicious code...
Malicious code in @frozen-team-qa/axios-client (npm)
The package @frozen-team-qa/axios-client was found to contain malicious code...
Dow’s 125-year legacy: Innovating with AI to secure a long future
Founded more than 125 years ago, Dow has demonstrated a commitment to leveraging science to make the world a better place. Today, Dow’s ambition to be the most innovative, inclusive, and sustainable materials science company is supported by a global security team dedicated to keeping employees,...
Siemens RUGGEDCOM CROSSBOW Station Access Controller
SUMMARY RUGGEDCOM CROSSBOW Station Access Controller SAC contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBOW Station...
Power Pwn 4.0.1
Power Pwn is a powerful open‑source toolset designed for red‑teaming and security testing within the Microsoft 365 environment, particularly around Copilot, Copilot Studio, and the Power Platform...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 Python tool for safe archive handling, path trav...
Who'S the Evil Twin? Differential Auditing for Undesired Behavior
Detecting hidden behaviors in neural networks poses a significant challenge due to minimal prior knowledge and potential adversarial obfuscation. We explore this problem by framing detection as an adversarial game between two teams: the red team trains two similar models, one trained solely on...
Pushing Boundaries With Claude Code
Claude Code stormed onto the programming scene when Anthropic launched it in February of this year. It moved, what Andrej Karpathy has called "The Autonomy Slider" from around a three to a solid eight. What this means is that you can give Claude Code direction, it will come up with a plan to...
CVE-2025-8573 Concrete CMS 9 through 9.4.2 is vulnerable to Stored XSS from Home Folder on Members Dashboard page
Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page. Version 8 was not affected. A rogue admin could set up a malicious folder containing XSS to which users could be directed upon login. The Concrete CMS security team gave this...
