CVE-2025-49041: Missing Authorization

Missing Authorization vulnerability in The African Boss Get Cash get-cash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Get Cash: from n/a through = 3.2.3...

PT-2025-52001

Name of the Vulnerable Software and Affected Versions The African Boss Get Cash versions through 3.2.3 Description An authorization issue exists in The African Boss Get Cash’s get-cash functionality. This allows exploitation due to incorrectly configured access control security levels...

Malware in south-african-id-info

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in south-african-id-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e086352ee820c350aadcfbcb3d69f34586e6a94ec2237005a12cf89a4b6091ba The package south-african-id-info was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199031

Malicious code in south-african-id-info npm...

MAL-2025-191012 Malicious code in south-african-id-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e086352ee820c350aadcfbcb3d69f34586e6a94ec2237005a12cf89a4b6091ba The package south-african-id-info was found to contain malicious code. Source: ghsa-malware...

Malware in valid-south-african-id

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in valid-south-african-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a363caeeaaa83a715f0d38b64608e11a39a272a42abe53c92dbbacb133dc927 The package valid-south-african-id was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199009

Malicious code in valid-south-african-id npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft SharePoint to breach a telecommunications company in the Middle East after it was publicly disclosed and patched in July 2025. Also targeted were government departments in an African country, as well as...

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft SharePoint to breach a telecommunications company in the Middle East after it was publicly disclosed and patched in July 2025. Also targeted were government departments in an African country, as well as...

EUVD-2014-6546

Malware in sbrugna...

EUVD-2023-41796

Malicious code in bioql PyPI...

EUVD-2025-26954

Malicious code in bioql PyPI...

Security Evaluation of Android Apps in Budget African Mobile Devices

Android's open-source nature facilitates widespread smartphone accessibility, particularly in price-sensitive markets. System and vendor applications that come pre-installed on budget Android devices frequently operate with elevated privileges, yet they receive limited independent examination. To...

CVE-2025-58823

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The African Boss Get Cash get-cash allows Stored XSS.This issue affects Get Cash: from n/a through = 3.2.3...

CVE-2025-58823

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The African Boss Get Cash get-cash allows Stored XSS.This issue affects Get Cash: from n/a through = 3.2.3...

CVE-2025-58823

CVE-2025-58823 impacts the WordPress Get Cash plugin (affected: Get Cash plugin

PT-2025-36162

Name of the Vulnerable Software and Affected Versions: The African Boss Get Cash versions through 3.2.2 Description: The African Boss Get Cash is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...