MAL-2025-20539 Malicious code in file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb (npm)

The package file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb was found to contain malicious code...

MAL-2025-14250 Malicious code in alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc (npm)

The package alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc was found to contain malicious code...

MAL-2025-15159 Malicious code in availab-le-alb-um-zip-349816-when-smoke-rises-ovwzf-uadxbi (npm)

The package availab-le-alb-um-zip-349816-when-smoke-rises-ovwzf-uadxbi was found to contain malicious code...

MAL-2025-20545 Malicious code in file-alb-um-zip-new-mp3-the-argument-42zje-bbcgpm (npm)

The package file-alb-um-zip-new-mp3-the-argument-42zje-bbcgpm was found to contain malicious code...

MAL-2025-15161 Malicious code in availab-le-alb-um-zip-a-ghost-is-born-fgmfl-kscsps (npm)

The package availab-le-alb-um-zip-a-ghost-is-born-fgmfl-kscsps was found to contain malicious code...

MAL-2025-14255 Malicious code in alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy (npm)

The package alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy was found to contain malicious code...

MAL-2025-15155 Malicious code in availab-le-alb-um-zip-17375-who-else-esihf-alrnbv (npm)

The package availab-le-alb-um-zip-17375-who-else-esihf-alrnbv was found to contain malicious code...

MAL-2025-20540 Malicious code in file-alb-um-zip-new-mp3-56040-vengeance-9f1kt-wcbqbj (npm)

The package file-alb-um-zip-new-mp3-56040-vengeance-9f1kt-wcbqbj was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-3624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function rlbarpxmit of the file...

CVE-2010-5019

SQL injection vulnerability in viewphoto.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter...

Authentication Bypass

github.com/hashicorp-forge/hermes is vulnerable to Authentication Bypass. The vulnerability is due to improper validation of JWT when using the AWS ALB authentication mode, potentially allowing an authentication bypass attack...

CVE-2025-1293

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0...

GHSA-VXM9-8MFW-VC6G Hermes improperly validates a JWT

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0...

Hermes improperly validates a JWT

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0...

CVE-2025-1293

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0...

CVE-2025-1293 HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0...

CVE-2025-1293 HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0...

CVE-2025-1293 HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0...

CVE-2025-1293

Hermes versions up to 0.4.0 improperly validated JWTs when using AWS ALB authentication, potentially allowing authentication bypass. Root cause: JWT validation flaw in the AWS ALB auth flow. Impact per CVE: authentication bypass with high severity (CVSSv3.1 base score 8.2). Affected versions: up ...

CVE-2025-1293: Weak Authentication

Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0...