Malicious code in react-resizable-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b791a5578b446e5de9303b32ba8d60c1a02675d40f4fea3db73997d2de3759e5 The package react-resizable-text was found to contain malicious code...

MAL-2025-192836 Malicious code in node-calculator-98ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97066fa13c451f8e27d4a140e49f882ea4d259609ae539e005a948e06e36268c The package node-calculator-98ba was found to contain malicious code...

MAL-2025-192828 Malicious code in node-calculator-2eb4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e571a443d6fe04b41f5a714fb830514677b55d53d42bac0260f312e4a8b72b6f The package node-calculator-2eb4 was found to contain malicious code...

MAL-2025-192799 Malicious code in gibertserct15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcf1ea6477d7bbd80b0e598d5b8fd059b9f00222e393308e69c08489e29e985 The package gibertserct15 was found to contain malicious code...

MAL-2025-192782 Malicious code in elf-stats-shimmering-fir-491 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814231062345096048a888507b3b8a1c4a5596764e33310ecc94a6b441ec6543 The package elf-stats-shimmering-fir-491 was found to contain malicious code...

Malicious code in elf-stats-glittering-cookie-844 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d3fbb5614bda10029530cf75770c8dbd32439a26872c6f095c738d2ab33b21 The package elf-stats-glittering-cookie-844 was found to contain malicious code...

Malicious code in bootstrap-setflexcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90557c8cf061fb243537b42df1c27af4fc410d5a3bbeb6df2346720058fa9d4f The package bootstrap-setflexcolor was found to contain malicious code...

EUVD-2025-204937

Malicious code in bootstrap-setcolor npm...

EUVD-2025-204941

Malicious code in auth-handler npm...

MAL-2025-192712 Malicious code in auth-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d1be042f1565157d9c5e97b927919aa32bedb254b501aa374caf00c242ee83 The package auth-handler was found to contain malicious code...

CVE-2025-15012

creationtimestamp| type| source ---|---|--- 2025-12-23 04:48:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115767069049209533...

CVE-2025-68614

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject...

LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute arbitrary script on affected installations of LibreNMS. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the name parameter provided to the rules endpoint. The issue results from the lac...

LibreNMS 跨站脚本漏洞

LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. A cross-site scripting vulnerability exists in LibreNMS versions prior to 25.12.0, which...

CVE-2025-68614 LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject...

CVE-2025-68614 LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject...

CVE-2025-68614 LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject...

CVE-2025-68614

Summary: CVE-2025-68614 affects LibreNMS prior to 25.12.0, where the Alert Rule API is vulnerable to stored cross-site scripting. The root cause is insufficient sanitization of the alert rule name when creating/updating rules via the API, allowing injected HTML that can be rendered in the Alerts ...

MAL-2025-192696 Malicious code in mui-wrapper-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990f5534f23c3e77faec1b92be83c7827d3136d03abcfefd245b8fa4f987bd52 The package mui-wrapper-core was found to contain malicious code. Source: ghsa-malware ba2ba20b7b8b4a7fae1afa52854fe8be2f326067033269e32445cd20cbad44...

Malicious code in mw-frontend-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9706fc1838aa618d5cc4b64d3b1ce78e464ba761a9762bf1c3a39cdc44fda577 The package mw-frontend-utils was found to contain malicious code. Source: ghsa-malware...