MAL-2025-17104 Malicious code in cli-cressida-tool-supercluster (npm)

The package cli-cressida-tool-supercluster was found to contain malicious code...

MAL-2025-17512 Malicious code in content-cloud-validator-tool (npm)

The package content-cloud-validator-tool was found to contain malicious code...

MAL-2025-32560 Malicious code in run-script-astrophysics-tool-cosmochemistry (npm)

The package run-script-astrophysics-tool-cosmochemistry was found to contain malicious code...

MAL-2025-21999 Malicious code in grunt-spinner-janus-tool (npm)

The package grunt-spinner-janus-tool was found to contain malicious code...

MAL-2025-37637 Malicious code in ultra-tool-kit (npm)

The package ultra-tool-kit was found to contain malicious code...

MAL-2025-27333 Malicious code in neuromorphic-tool-multiverse-mineralogy (npm)

The package neuromorphic-tool-multiverse-mineralogy was found to contain malicious code...

MAL-2025-37043 Malicious code in tool-koa-technocracy-ariel (npm)

The package tool-koa-technocracy-ariel was found to contain malicious code...

MAL-2025-14783 Malicious code in archaeogenetics-nova-centauri-tool (npm)

The package archaeogenetics-nova-centauri-tool was found to contain malicious code...

MAL-2025-32064 Malicious code in remark-commitizen-sirius-css-loader (npm)

The package remark-commitizen-sirius-css-loader was found to contain malicious code...

CVE-2025-32004

Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20092

Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Malicious Package

Overview iuz-64bit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for soci...

Malicious Package

Overview deltago4 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

AZL-66306 CVE-2025-8715 affecting package postgresql for versions less than 16.10-1

Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks...

Flaw in Older Version of Android Rooting Tool KernelSU Allows Full Device Takeover

Zimperium's zLabs team uncovers a critical security flaw in the popular Android rooting tool, KernelSU v0.5.7. Learn how…...

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-b...

ROS-20250814-06

Vulnerability in Iperf3 network throughput measurement tool is related to incorrect processing of test parameters passed to server in json format. test parameters passed to the server in json format. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...

Aide 安全漏洞

Aide is a tool for monitoring file system changes. It can be used to detect unauthorized monitored files and directories. A security vulnerability exists in versions prior to Aide 0.19.2, which stems from improper output neutralization and could lead to bypassing detection...

PostgreSQL 安全漏洞

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A security vulnerability exists in PostgreSQL versions 17.6, 16.10,...

Vulnerability in core server (CVE-2025-8715)

PostgreSQL pgdump newline in object name executes arbitrary code in psql client and in restore target server Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account...