MAL-2025-7306 Malicious code in @crabas0npm/excepturi-laborum-a (npm)

The package @crabas0npm/excepturi-laborum-a was found to contain malicious code...

MAL-2025-7997 Malicious code in @hishpr/a-nesciunt-iusto-illo (npm)

The package @hishpr/a-nesciunt-iusto-illo was found to contain malicious code...

MAL-2025-11223 Malicious code in @zalastax/nolb-dsr-package-public-a (npm)

The package @zalastax/nolb-dsr-package-public-a was found to contain malicious code...

MAL-2025-7426 Malicious code in @crabas0npm/numquam-culpa-a (npm)

The package @crabas0npm/numquam-culpa-a was found to contain malicious code...

MAL-2025-10755 Malicious code in @zalastax/nolb-babel-preset-a (npm)

The package @zalastax/nolb-babel-preset-a was found to contain malicious code...

MAL-2025-13918 Malicious code in a-vailable-al-bum-file-2016-53720-my-best-human-face-ut6vi-wmlvvn (npm)

The package a-vailable-al-bum-file-2016-53720-my-best-human-face-ut6vi-wmlvvn was found to contain malicious code...

MAL-2025-13925 Malicious code in a-vailable-al-bum-file-86031-the-multiplication-table-gooza-naepif (npm)

The package a-vailable-al-bum-file-86031-the-multiplication-table-gooza-naepif was found to contain malicious code...

MAL-2025-13929 Malicious code in a-vailable-al-bum-file-emika-xmauh-mdepdk (npm)

The package a-vailable-al-bum-file-emika-xmauh-mdepdk was found to contain malicious code...

CVE-2025-53347

CVE-2025-53347 (Kalium) is a CSRF vulnerability in the Kalium WordPress theme (and related plugin) versions n/a through 3.18.3. The CVE notes that unauthenticated attackers cannot exploit it directly, but the related CVE metrics show an attack vector of network with user interaction required and ...

CVE-2025-49036

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in octagonwebstudio Premium Addons for KingComposer premium-addons-for-kingcomposer allows PHP Local File Inclusion.This issue affects Premium Addons for KingComposer: from n/a...

CVE-2023-52623

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15...

CVE-2025-50165

CVE-2025-50165 targets the Windows/Microsoft Graphics Component through an untrusted pointer dereference in JPEG decoding, enabling remote code execution. Exploitation relies on specially crafted images (e.g., JPEG metadata segments) to trigger code execution without user interaction on affected ...

Azure Virtual Machines Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...

Linux Distros Unpatched Vulnerability : CVE-2017-13305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974. CVE-2017-13305...

CVE-2025-27128 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-24298 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-24298 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-25278 liteos_a has a race condition vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition...

CVE-2025-27577 liteos_a has a race condition vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition...

Linux Distros Unpatched Vulnerability : CVE-2017-0750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A elevation of privilege vulnerability in the Upstream Linux file system. Product: Android. Versions: Android kernel. Android ID: A-36817013. CVE-2017-0750 Note...