Malicious code in @sas-dvr/ltjs-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bed916c128062e6e46a4741aecf296a1d3898ba06f3f0a818b19c8e90cd69f5b The OpenSSF Package Analysis project identified '@sas-dvr/ltjs-bird' @ 132.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-2804 Malicious code in @sas-dvr/ltjs-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bed916c128062e6e46a4741aecf296a1d3898ba06f3f0a818b19c8e90cd69f5b The OpenSSF Package Analysis project identified '@sas-dvr/ltjs-bird' @ 132.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-2803 Malicious code in ria-learninghub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a83f503eead43ba3f08b93a32822c4c075b0029c73b852b2fec0871457b3ed26 The OpenSSF Package Analysis project identified 'ria-learninghub' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

About the security content of macOS Sonoma 14.7.5

About the security content of macOS Sonoma 14.7.5 This document describes the security content of macOS Sonoma 14.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of macOS Ventura 13.7.5

About the security content of macOS Ventura 13.7.5 This document describes the security content of macOS Ventura 13.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma, which stems from protocol mishandling and could lead to a privileged network location attacker tracking user activity...

CVE-2024-39311

creationtimestamp| type| source ---|---|--- 2025-03-28 17:45:33+00:00| seen| https://t.me/cvedetector/21451 2026-06-28 14:35:02+00:00| published-proof-of-concept| https://github.com/publify/publify/security/advisories/GHSA-8fm5-gg2f-f66q...

MAL-2025-2734 Malicious code in dmpconnectjsapp-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d21050916c0e5222db92b8c6056e3a60fbf54f55cebefb5509a15453c20d68b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2025:2865

creationtimestamp| type| source ---|---|--- 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9007 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9006 2025-03-27 04:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9008 2025-03-27 04:25:52+00:00...

RHSA-2025:2866

creationtimestamp| type| source ---|---|--- 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9006 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9007 2025-03-27 04:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9008 2025-03-27 04:25:52+00:00...

MAL-2025-2730 Malicious code in webhooks-contacts-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823e5cf1e6fd5a930dbd702f998d1d88ae58e255f62e920b0262615ac2efdbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-9874

creationtimestamp| type| source ---|---|--- 2025-03-26 18:45:16+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyjkq4x2s 2025-03-26 19:05:11+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llci45jqpj2n 2025-03-26 21:39:21+00:00| seen|...

CVE-2019-9875

creationtimestamp| type| source ---|---|--- 2025-03-26 18:45:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v 2025-03-26 19:05:08+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u 2025-03-26 21:39:21+00:00| seen|...

CVE-2025-30232

creationtimestamp| type| source ---|---|--- 2025-03-26 15:06:51+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3llc2rx277m2d 2025-03-26 15:38:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llc4kw3ufk2v 2025-03-27 06:23:06+00:00| seen|...

Sparring in the Cyber Ring: Using Automated Pentesting to Build Resilience

"A boxer derives the greatest advantage from his sparring partner…" — Epictetus, 50–135 AD Hands up. Chin tucked. Knees bent. The bell rings, and both boxers meet in the center and circle. Red throws out three jabs, feints a fourth, and—BANG—lands a right hand on Blue down the center. This wasn't...

CVE-2024-11847

creationtimestamp| type| source ---|---|--- 2025-03-26 06:25:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8809 2025-03-26 09:42:18+00:00| seen| https://t.me/cvedetector/21150...

Moodle Permission Issues Vulnerability (CNVD-2025-10589)

Moodle is an open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A permission issue vulnerability exists in Moodle. The vulnerability stems from a permission check that does not properly consider grouping...

Malicious code in corehome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 835efaf181707862582cf58938ea26bb25e18a1d228269a42b58f12d1c250ca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24514

creationtimestamp| type| source ---|---|--- 2025-03-24 17:55:00+00:00| seen| https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html 2025-03-24 21:56:48+00:00| seen| https://bsky.app/profile/lookitup.baby/post/3ll5qr5t6uk2k 2025-03-24 22:01:06+00:00| seen|...

MAL-2025-2609 Malicious code in eclipse-tractusx-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5357a55497ee86b69ff4768aee0d28461a0f024df6f74c50c2511d1032cf3128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...