MAL-2025-6220 Malicious code in svelte-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4125174a3a5dd31d226347f4233e451beb406573ff2e254d5b9b6289f52ff3af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Q2 2025 Ransomware Trends Analysis: Boom and Bust

“Tumultous times” would be an accurate summary of Q2 2025 where ransomware threat actors are concerned. Rapid7’s internal and publicly-available data analysis reveals a dynamic environment where major players come and go, newer groups work their way up the heavy-hitters ladder, and threat actors...

MAL-2025-6175 Malicious code in kiwi-module-seo-featured (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c24e834cb597541f0c8dcba8a3ce294a90caaefaec74f82d2e208a5b590581f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6143 Malicious code in @verge-vcl-react/empty-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c6dc68e47c23f02d70ee699a86368034f0b827a80dcacb93619ac71261e500d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-30404 · Undefined · Undefined

CVE-2025-54356 Rejected reason https://t.co/wlhPkGwe6f Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...

CVE-2025-7264

IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2015-10139

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wpajaximportdata' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account...

CVE-2025-41677

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41677

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41674

A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command...

CVE-2025-41676

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

CVE-2025-41676

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

CVE-2025-41673

A high privileged remote attacker can execute arbitrary system commands via POST requests in the sendsms action due to improper neutralization of special elements used in an OS command...

CVE-2025-41673

A high privileged remote attacker can execute arbitrary system commands via POST requests in the sendsms action due to improper neutralization of special elements used in an OS command...

CVE-2025-41677 Resource Exhaustion via POST Requests to send-mail Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41677 Resource Exhaustion via POST Requests to send-mail Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession...

CVE-2025-41677

CVE-2025-41677 describes a resource exhaustion vulnerability in MB CONNECT LINE mbNET.mini (and related Helmholz/mbNET.mini variants) where an attacker with high privileges can remotely exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in rapi...

CVE-2025-41676 Resource Exhaustion via POST Requests to send-sms Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...

CVE-2025-41676

The CVE-2025-41676 entry describes a resource-exhaustion vulnerability in MB CONNECT LINE mbNET.mini (industrial router) where a high-privilege remote attacker can overwhelm system resources by sending specially crafted POST requests to the send-sms action in rapid succession. Connected sources c...

CVE-2025-41676 Resource Exhaustion via POST Requests to send-sms Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession...