MAL-2025-46117 Malicious code in spark-webpack-react-app (npm)

The package spark-webpack-react-app was found to contain malicious code...

Malicious code in @majiajun7/claude-code (npm)

The package @majiajun7/claude-code was found to contain malicious code...

MAL-2025-42186 Malicious code in @amiga-fwk-nodejs/metrics (npm)

The package @amiga-fwk-nodejs/metrics was found to contain malicious code...

CVE-2025-58881

creationtimestamp| type| source ---|---|--- 2025-09-05 14:47:03+00:00| seen| https://t.me/canyoupwnme/6883 2025-09-05 16:10:48+00:00| seen| https://t.me/canyoupwnme/6887...

CVE-2024-43115

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

CVE-2025-22414

In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-41059

creationtimestamp| type| source ---|---|--- 2025-09-04 11:27:21+00:00| seen| Telegram/zqvHZYMjk1bf1o6p3kGIyE85BeceV-d-lKfA8voWJ2PtMQ...

CVE-2024-43115 Apache DolphinScheduler: Alert Script Attack

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

CVE-2024-43115

CVE-2024-43115 affects Apache DolphinScheduler (pre-3.2.2). The issue is due to improper input validation, permitting an authenticated user to trigger execution of arbitrary shell scripts via the alert script. Upgrading to 3.3.1 is recommended and fixes the vulnerability. There is no exploitation...

CVE-2024-43115 Apache DolphinScheduler: Alert Script Attack

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...

PT-2025-35703

Name of the Vulnerable Software and Affected Versions: Apache DolphinScheduler versions prior to 3.2.2 Description: An authenticated user can execute any shell script on the server through the alert script functionality due to improper input validation. Recommendations: Upgrade to version 3.3.1...

Release Information for Veeam ONE 13.0.1 Patch 1

Veeam ONE 13 Releases 13.0.2.6723 2026-05-27 What's New New Features and Improvements Suspicious Incremental Backup Size Alarm -- Extended Platform Support The Suspicious Incremental Backup Size alarm now covers all platforms supported in Veeam ONE v13, including Proxmox VE, oVirt KVM Oracle Linu...

CVE-2025-45805

creationtimestamp| type| source ---|---|--- 2025-09-02 20:16:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/50029 2025-09-03 03:00:07+00:00| seen| Telegram/cHcofYq5yVH7DLc69hIcAd2SE1E77x3v0sMIcSbMCujGDRo 2025-09-03 03:00:12+00:00| published-proof-of-concept|...

CVE-2025-9813

creationtimestamp| type| source ---|---|--- 2025-09-02 04:32:20+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxtbwn3wfm2n 2025-09-02 08:40:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxtpsibvkt27 2026-08-14 16:00:06+00:00| seen| https://t.me/purpsec/1070...

CVE-2025-48363

Cross-Site Request Forgery CSRF vulnerability in Metin Saraç Popup for CF7 with Sweet Alert cf7-sweet-alert-popup allows Cross Site Request Forgery.This issue affects Popup for CF7 with Sweet Alert: from n/a through = 1.6.5...

RHSA-2023:5095

creationtimestamp| type| source ---|---|--- 2025-08-30 12:19:50+00:00| seen| Telegram/80A1eyoWoPGSiDEp1L8hDgFCJP41VDr32O2TwZCuIF-1jM...

RHSA-2023:5758

creationtimestamp| type| source ---|---|--- 2025-08-30 08:23:02+00:00| seen| Telegram/E7kq5irfw2-NnR1TZZjTmeqx483hOvXEhMeNyQmnvthnxzg...

CVE-2023-5764

creationtimestamp| type| source ---|---|--- 2025-08-30 08:22:56+00:00| seen| Telegram/dUlaSIsUWUiqiseKOPit5pxMhUG0DydGzU1OdGJljXTSUo...

RHSA-2023:5396

creationtimestamp| type| source ---|---|--- 2025-08-30 05:19:22+00:00| seen| Telegram/z7CYhrJnplaLHLQrVZkfCCCObyPnB5ATj7M98dxLHmaLocQ 2025-08-30 05:19:26+00:00| seen| Telegram/eDBwHwYH6KGV4398TKRRnto7VWDNNwIC6NshKq-OfqsZ3g 2025-09-02 14:27:08+00:00| seen|...

RHSA-2023:7139

creationtimestamp| type| source ---|---|--- 2025-08-30 02:22:26+00:00| seen| Telegram/swvvDBr4sLUJpO-Mf1lDD-RcBF5rVCeCsgITXhhnfHg5hTU 2025-08-30 05:19:18+00:00| seen| Telegram/IyktYvz2ZXSoln-Xw9gf7lHEpCZ8IZsKAFgChoCz0-9C5M 2025-08-30 05:19:19+00:00| seen|...