MAL-2025-17873 Malicious code in cycle-monorepo-sandbox-most-adapter (npm)

The package cycle-monorepo-sandbox-most-adapter was found to contain malicious code...

MAL-2025-17879 Malicious code in cycle-monorepo-sandbox-xstream-adapter (npm)

The package cycle-monorepo-sandbox-xstream-adapter was found to contain malicious code...

MAL-2025-17875 Malicious code in cycle-monorepo-sandbox-rx-adapter (npm)

The package cycle-monorepo-sandbox-rx-adapter was found to contain malicious code...

MAL-2025-17877 Malicious code in cycle-monorepo-sandbox-rxjs-adapter (npm)

The package cycle-monorepo-sandbox-rxjs-adapter was found to contain malicious code...

Malicious code in activerecord-pedantmysql2-adapter (npm)

The package activerecord-pedantmysql2-adapter was found to contain malicious code...

Malicious code in cycle-monorepo-sandbox-rxjs-adapter (npm)

The package cycle-monorepo-sandbox-rxjs-adapter was found to contain malicious code...

Malicious code in cycle-monorepo-sandbox-xstream-adapter (npm)

The package cycle-monorepo-sandbox-xstream-adapter was found to contain malicious code...

Malicious code in cycle-monorepo-sandbox-rx-adapter (npm)

The package cycle-monorepo-sandbox-rx-adapter was found to contain malicious code...

MAL-2025-14052 Malicious code in activerecord-pedantmysql2-adapter (npm)

The package activerecord-pedantmysql2-adapter was found to contain malicious code...

Deserialization Of Untrusted Data

ms-swift is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to unsafe deserialization due to malicious pickle deserialization in adapter model files, allowing arbitrary command execution when loading specially crafted adapter models from ModelScope...

Linux Distros Unpatched Vulnerability : CVE-2021-47425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle...

Linux Distros Unpatched Vulnerability : CVE-2024-26620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: always filter entire AP matrix The vfioapmdevfiltermatrix function is called...

CVE-2025-54793

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...

CVE-2025-54793 Astro: Duplicate trailing slash feature can lead to Open Redirects

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...

CVE-2025-54793 Astro: Duplicate trailing slash feature can lead to Open Redirects

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbitrary external domains by crafting URLs...

Linux Distros Unpatched Vulnerability : CVE-2022-49900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: piix4: Fix adapter not be removed in piix4remove In piix4probe, the piix4 adapter will be registered in: piix4probe piix4addadapterssb800 / piix4addadapter...

MS SWIFT Deserialization RCE Vulnerability

This appears to be a security vulnerability report describing a remote code execution RCE exploit in the ms-swift framework through malicious pickle deserialization in adapter model files. The vulnerability allows arbitrary command execution when loading specially crafted adapter models from...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +15 more potentially affected by CVE-2025-8292 via electron (>=37.0.0, <=37.2.5)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.82.0-nightly-20250808-aaf471278, =0.20.0-rc.0, =1.0.1, =1.0.2 - deyuan 1.0.0 - http-cache-store 0.0.1 and more Source cves: CVE-2025-8292 Source advisory: SNYK:JS-ELECTRON-11502178...

PT-2025-32493 · Pypi · Ms-Swift

This appears to be a security vulnerability report describing a remote code execution RCE exploit in the ms-swift framework through malicious pickle deserialization in adapter model files. The vulnerability allows arbitrary command execution when loading specially crafted adapter models from...

Integer Overflow Vulnerability in Multiple VMWare Products

VMWare ESXi and others are products of VMWare, Inc. VMWare ESXi is an enterprise-grade Type-1 hypervisor developed by VMWare, Inc. that can be installed and run directly on physical server hardware without relying on the underlying operating system for efficient creation and management of virtual...