Malicious code in nf-web-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9daed61da73f36e121e5335edee0f392a2a0f1ee89890f0589974f04ff0f1c9 Any computer that has this package installed or running should be considered...

MAL-2025-45306 Malicious code in nf-web-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9daed61da73f36e121e5335edee0f392a2a0f1ee89890f0589974f04ff0f1c9 Any computer that has this package installed or running should be considered...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome versions prior to 140.0.7339.80, which stems from an improperly implemented download that could lead to UI spoofing...

PT-2025-35800

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 140.0.7339.80 Description: An inappropriate implementation in Downloads in Google Chrome on Android allowed a remote attacker to perform UI spoofing via a crafted HTML page. Recommendations: Update Google Chrom...

PT-2025-46937

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.80 Description An issue in Compositing within Google Chrome, prior to version 140.0.7339.80, could allow a remote attacker to perform UI spoofing through a specially designed HTML page. This is due to...

CVE-2025-33083

IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-33082 IBM Concert Software cross-site scripting

IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-33082

IBM Concert Software (1.0.0–1.1.0) is affected by CVE-2025-33082, a cross-site scripting vulnerability that lets an authenticated user embed arbitrary JavaScript in the Web UI, potentially altering functionality and exposing credentials within a trusted session. The flaw affects IBM Concert Softw...

CVE-2025-55202

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases...

Linux Distros Unpatched Vulnerability : CVE-2025-8882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially...

Linux Distros Unpatched Vulnerability : CVE-2025-5066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific...

Linux Distros Unpatched Vulnerability : CVE-2017-1000121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process t...

Linux Distros Unpatched Vulnerability : CVE-2025-3072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI...

Linux Distros Unpatched Vulnerability : CVE-2023-30801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change t...

Malicious code in @callcenter-frontend/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4016a8ba643f5006745e20e9ffdf0834e7866393f01cb525cd3bfafc8131218 The OpenSSF Package Analysis project identified...

Malicious code in tailwindcss-animate-ui (npm)

The package tailwindcss-animate-ui was found to contain malicious code...

MAL-2025-42095 Malicious code in tailwindcss-animate-ui (npm)

The package tailwindcss-animate-ui was found to contain malicious code...

CVE-2025-55202

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases...

CVE-2025-55202 Opencast has a partial path traversal vulnerability in UI config

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases...

CVE-2025-55202 Opencast has a partial path traversal vulnerability in UI config

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases...