MAL-2025-4051 Malicious code in evm-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Privilege Chaining

Overview Affected versions of this package are vulnerable to Privilege Chaining via the project secret validation process. An attacker can escalate privileges and potentially gain control over seed clusters by bypassing the intended security restrictions. Remediation Upgrade...

Privilege Chaining

Overview Affected versions of this package are vulnerable to Privilege Chaining via the project secret validation process. An attacker can escalate privileges and potentially gain control over seed clusters by bypassing the intended security restrictions. Remediation Upgrade...

Malicious code in fireblocks-netlink-v2-api-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 482068c6f9b5d8fd2076ed53124eac7c2d6c5e4237390c3280188cfaa7ad6554 The OpenSSF Package Analysis project identified 'fireblocks-netlink-v2-api-validator' @ 2.0.2 npm as malicious. It is considered malicious...

Malicious code in node-validator-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2e959ea4d60fa68cfd23f7e2fee922a263bcdfbee4e19662eca073135680b91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4012 Malicious code in node-validator-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2e959ea4d60fa68cfd23f7e2fee922a263bcdfbee4e19662eca073135680b91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti Endpoint Manager Mobile EPMM contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source...

MAL-2025-3908 Malicious code in node-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d77d3f937a0c6f4071e5688241c3222eeb62c0033c93c981570e554400b14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d77d3f937a0c6f4071e5688241c3222eeb62c0033c93c981570e554400b14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3917 Malicious code in solana-crypto-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0ae4278aeded272c00f7218890bedf1e2e9dc77d03348eb4a1afe7fa277e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-869W-47C6-FQ8Q Babylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt

Summary Minting large amount of tokens through ibc transfer and then depositing them in validator rewards pool via DepositValidatorRewardsPool message can lead to integer overflow panic when calculating cumulativerewardratio for the validator. This calculation happens in x/epoching module...

VulnCheck KEV: CVE-2025-4428

Ivanti Endpoint Manager Mobile EPMM contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source...

GHSA-QV97-5QR8-2266 Mithril snapshots for Cardano database could be compromised by an adversary

Impact Mithril certification of Cardano database The Mithril network provides certification for snapshots of the Cardano database, enabling users to quickly bootstrap a Cardano node without relying on the slower peer-to-peer synchronization process. To generate a multi-signature, a minimum...

Malicious code in array-length-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eeb8fbe13dcffd2d78c2677d8add867f32dd32725416d8f2f71ff2df0ba6f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3567 Malicious code in array-length-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eeb8fbe13dcffd2d78c2677d8add867f32dd32725416d8f2f71ff2df0ba6f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3551 Malicious code in express-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1a336f4415ad211b6844d41de64f77697780083624b44fdeb0e5e9d4270ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1a336f4415ad211b6844d41de64f77697780083624b44fdeb0e5e9d4270ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IPW Systems Metazo 安全漏洞

IPW Systems Metazo is an industrial IoT gateway solution from IPW Systems that enables data collection, processing and transmission between field devices and IT systems. A security vulnerability exists in IPW Systems Metazo version 8.1.3 and earlier, which stems from the fact that...

CVE-2025-24539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows Reflected XSS.This issue affects DeBounce Email Validator: from n/a through = 5.6.5...