MAL-2025-19039 Malicious code in dynseg-util (npm)

The package dynseg-util was found to contain malicious code...

Malicious code in my-internal-util-alpha03 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5226a39e582ae7182e19ff891ade0e29cd6e15705fa87bd0bd0757a8a0796c8 The OpenSSF Package Analysis project identified 'my-internal-util-alpha03' @ 99.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2025-6864 Malicious code in my-internal-util-alpha03 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5226a39e582ae7182e19ff891ade0e29cd6e15705fa87bd0bd0757a8a0796c8 The OpenSSF Package Analysis project identified 'my-internal-util-alpha03' @ 99.9.10 npm as malicious. It is considered malicious because: - The...

CVE-2025-8814

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

CVE-2025-8814 atjiu pybbs CookieUtil.java setCookie cross-site request forgery

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

CVE-2025-8814 atjiu pybbs CookieUtil.java setCookie cross-site request forgery

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

CVE-2025-8814

CVE-2025-8814 affects atjiu pybbs up to version 6.0.0. The vulnerability lies in the setCookie function in src/main/java/co/yiiu/pybbs/util/CookieUtil.java, enabling cross-site request forgery. Exploitation is possible remotely, and public disclosure of the exploit is noted. The patch 8aa2bb1aef3...

MAL-2025-6709 Malicious code in currency-util (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in currency-util (npm)

The package communicates with a domain associated with malicious activity...

NewStart CGSL MAIN 7.02 : util-linux Vulnerability (NS-SA-2025-0198)

The remote NewStart CGSL host, running version MAIN 7.02, has util-linux packages installed that are affected by a vulnerability: - wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically...

Malicious code in foundation.util.triggers.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83bf60b2f5ebff2152502dd84c2d1275fe67e6eb08d9ce2937e0bc3de9f113a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2025-38206

In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayedfree The double free could happen in the following path. exfatcreateupcasetable exfatcreateupcasetable : return error exfatfreeupcasetable : free -volutbl exfatloaddefaultupcasetable : return erro...

MAL-2025-5492 Malicious code in cors-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939034e252aec0a1bb8e90a23fa9e524d966682283a461f00204f8bedf29c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cors-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939034e252aec0a1bb8e90a23fa9e524d966682283a461f00204f8bedf29c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5008 Malicious code in @openapi-platform/git-util (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96bf6ba53f72a3f15a38886bfb459f601a5de59cf964ebc169b368015d75e967 Any computer that has this package installed or running should be considered...

TencentOS Server 3: apr-util (TSSA-2023:0073)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0073 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: util-linux (TSSA-2024:0903)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0903 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

SUSE: Security Advisory (SUSE-SU-2024:1943-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5525: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan of the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. The attack can be initiated remotely. The complexity of an...

CBL Mariner 2.0 Security Update: cloud-hypervisor / kata-containers / kata-containers-cc (CVE-2023-50711)

The version of cloud-hypervisor / kata-containers / kata-containers-cc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-50711 advisory. - vmm-sys-util is a collection of modules that provides helpe...