MAL-2025-16736 Malicious code in cfer-toolkit (npm)

The package cfer-toolkit was found to contain malicious code...

MAL-2025-17338 Malicious code in com.microsoft.mixedreality.toolkit.planefinding (npm)

The package com.microsoft.mixedreality.toolkit.planefinding was found to contain malicious code...

MAL-2025-17333 Malicious code in com.microsoft.mixedreality.toolkit.examples (npm)

The package com.microsoft.mixedreality.toolkit.examples was found to contain malicious code...

MAL-2025-24770 Malicious code in kpl-ui-toolkit (npm)

The package kpl-ui-toolkit was found to contain malicious code...

MAL-2025-17336 Malicious code in com.microsoft.mixedreality.toolkit.gpustats (npm)

The package com.microsoft.mixedreality.toolkit.gpustats was found to contain malicious code...

MAL-2025-17335 Malicious code in com.microsoft.mixedreality.toolkit.figmabridge (npm)

The package com.microsoft.mixedreality.toolkit.figmabridge was found to contain malicious code...

MAL-2025-32015 Malicious code in refactoring_toolkit (npm)

The package refactoringtoolkit was found to contain malicious code...

MAL-2025-17340 Malicious code in com.microsoft.mixedreality.toolkit.testutilities (npm)

The package com.microsoft.mixedreality.toolkit.testutilities was found to contain malicious code...

MAL-2025-21803 Malicious code in grafana-toolkit (npm)

The package grafana-toolkit was found to contain malicious code...

MAL-2025-17337 Malicious code in com.microsoft.mixedreality.toolkit.micstream (npm)

The package com.microsoft.mixedreality.toolkit.micstream was found to contain malicious code...

MAL-2025-17339 Malicious code in com.microsoft.mixedreality.toolkit.standardassets (npm)

The package com.microsoft.mixedreality.toolkit.standardassets was found to contain malicious code...

MAL-2025-34248 Malicious code in sutterhealth-ui-toolkit-widgets (npm)

The package sutterhealth-ui-toolkit-widgets was found to contain malicious code...

CVE-2025-9043

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious...

CVE-2025-9043

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious...

CVE-2025-9043

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious...

CVE-2025-9043

CVE-2025-9043 concerns Seagate Toolkit on Windows, affected versions prior to 2.34.0.33. It describes an unquoted service path (CWE-428) that allows a user with write permission to the system drive root to place a malicious Program.exe, resulting in execution with SYSTEM privileges. The vulnerabi...

Exploit for Command Injection in Fit2Cloud 1Panel

https://github.com/hophtien/CVE-2025-54424/releaseshttps://gi...

Seagate Toolkit registers a Windows service with an unquoted file path

Overview Seagate Toolkit provided by Seagate Technology contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-9043 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to the developer and IPA. JPCERT/CC coordinated with the developer...

PT-2025-33344 · Seagate · Seagate Toolkit

Name of the Vulnerable Software and Affected Versions: Seagate Toolkit versions prior to 2.34.0.33 Description: The service executable path in Seagate Toolkit allows an attacker with administrator privileges to exploit a vulnerability. An attacker with write permissions to the root directory coul...

AlmaLinux 9 : toolbox (ALSA-2025:13673)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13673 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding description...