Malicious code in profile-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b80f14b143352696756a497488d6488fc916c23c01fe1af2b943db50cf1e6f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2323 Malicious code in profile-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b80f14b143352696756a497488d6488fc916c23c01fe1af2b943db50cf1e6f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-ethers-react-ts-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-53692

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions:...

PT-2025-10099

Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.2.0.2851 build 20240808 QuTS hero versions prior to h5.2.0.2851 build 20240808 Description A sensitive information exposure issue has been identified, which could allow remote attackers to compromise system security if...

CVE-2025-23515

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

MAL-2025-1949 Malicious code in typespec-ts-interface-emitter (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-23515 WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

CVE-2025-23515 WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

CVE-2025-23515

CVE-2025-23515 corresponds to a Missing Authorization vulnerability in the WordPress plugin ts-tree, affecting ts-tree versions up to 0.1.1. The vulnerability is described as Arbitrary Content Deletion due to insufficient access control (Authenticated/Subscriber+ level). Public data confirms the ...

Malicious code in console-node-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecc4bf06f248fd5a32e4fed3e3e70f9b5de43bde1b2d52cb55eca94c6f7810b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2035 Malicious code in console-node-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecc4bf06f248fd5a32e4fed3e3e70f9b5de43bde1b2d52cb55eca94c6f7810b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-23515: Missing Authorization

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...

WordPress plugin ts-tree 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-11072

Name of the Vulnerable Software and Affected Versions: rfc ts frames.cc affected versions not specified Description: A use-after-free issue exists in the rfc send buf uih function within rfc ts frames.cc. This could allow for arbitrary code execution, potentially leading to local escalation of...

Malicious code in ts-debugtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3f6757bf5754d4382f2a30e27ab0f9da0cb59e71231e5222d92ce9fd9c5065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1636 Malicious code in ts-debugtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3f6757bf5754d4382f2a30e27ab0f9da0cb59e71231e5222d92ce9fd9c5065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1635 Malicious code in ts-alpha-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c8f2ae0b7a59a7ccefbf9994c9b2bbfbdae35fc8a5e00813f91126eba04074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-alpha-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c8f2ae0b7a59a7ccefbf9994c9b2bbfbdae35fc8a5e00813f91126eba04074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2022-49456

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...