Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI CCM versions prior to 3.1.6 and Nagios XI version 5.8.8, which...

EUVD-2025-36887

Malicious code in zustand.js npm...

EUVD-2025-36757

Malicious code in react-naming-convention npm...

EUVD-2025-36784

Malicious code in wdr-beam npm...

EUVD-2025-36796

Malicious code in @gitlab-test/bun-v1 npm...

Malicious Package

Overview airbnb-babel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36826

Malicious code in xo-validation npm...

EUVD-2025-36824

Malicious code in durablefunctionsmonitor-vscodeext npm...

CVE-2025-35980

creationtimestamp| type| source ---|---|--- 2025-10-29 21:32:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4efinz6ha2k...

CVE-2025-62789 Wazuh vulnerable to NULL pointer dereference in fim_alert line 712

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fimalert implementation does not check whether the return value of ctimer is NULL or not before calling strdup on it. A compromised agent can cause a crash of analysisd by sending a...

CVE-2025-62789

CVE-2025-62789 affects Wazuh before 4.11.0. The fim_alert() path does not check the return value of ctime_r before calling strdup(), enabling a NULL pointer dereference that can crash analysisd when a compromised/malicious agent sends a crafted message to the Wazuh manager. Impact is denial of se...

CVE-2025-64095

creationtimestamp| type| source ---|---|--- 2025-10-29 00:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4c5etmxnu22 2025-10-29 00:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5isapkw2u 2025-10-31 04:18:20+00:00| seen|...

PT-2025-44323

Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.11.0 Description Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the fim alert implementation where it does not verify if the return value of ctime r is NULL before using it with...

CVE-2025-34304

creationtimestamp| type| source ---|---|--- 2025-10-28 15:43:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115452557190111700...

EUVD-2025-36406

Malicious code in @jameson777/mytest6 npm...

EUVD-2025-36417

Malicious code in shopify-logistics npm...

Fedora: Security Advisory (FEDORA-2025-5f46b27e1c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-62259

creationtimestamp| type| source ---|---|--- 2025-10-27 22:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m47iuseln52d...

Malicious code in new-wwe-immortals-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1f01bcf57c61890970d89a1b64684f4470980a293dcb6aedbce8bf51e198d The package new-wwe-immortals-h-ack-working-2023-march was found to contain malicious code...

MAL-2025-48943 Malicious code in new-tiktok-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3257e6436c4ec191b344e85593e5bea0a9e5b8669151176a87eee554c53ca86 The package new-tiktok-h-ack-working-2023-march was found to contain malicious code...