18628 matches found
PT-2025-31510 · Undefined · Undefined
CVE-2024-11478 Rejected reason https://t.co/tQc4QcG4Ui Customizable Vulnerability Alerts: https://t.co/U7998fz7yk...
PT-2025-33770
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A security issue was identified in NFS over TLS within the tls alert recv function. The vulnerability stems from an incorrect assumption regarding the validity of data within the messa...
MAL-2025-6373 Malicious code in redux-eslint-saga (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d08211092766c0313df71f1e2fe6fa8cf606e4f36570679a1391bda0a5dfd6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview postcss-minify-theme is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview notification-clients is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CISCO-SA-20040827-TELNET
creationtimestamp| type| source ---|---|--- 2025-07-30 02:45:32+00:00| seen| Telegram/Dnau3NRCe7OBfiMFOXh6vZ-unPpahT7b9zQDFEGsbPQsao...
RockyLinux 8 : container-tools:rhel8 (RLSA-2025:3210)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3210 advisory. golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh CVE-2025-22869 Tenable has extracted the preceding description block...
PT-2025-31400
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this issue, specifically...
CVE-2025-43216
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...
Malicious Package
Overview @sys711/my-npx-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-54427
CVE-2025-54427 (Polkadot Frontier) : The vulnerability affects Polkadot Frontier’s note_min_gas_price_target intrinsic. Before commit a754b3d, the check_inherent function was not implemented, allowing the block producer to set the target gas price without verification. This input drives MinGasPri...
Mageia: Security Advisory (MGASA-2025-0214)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in turborepo-tests-helpers (npm)
The package communicates with a domain associated with malicious activity...
GHSA-GQ52-6PHF-X2R6
creationtimestamp| type| source ---|---|--- 2025-07-26 02:35:24+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lutjom5oa52b...
MAL-2025-6304 Malicious code in react-server-dom-turbopack-experimental (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 919b44a54d192c9600403c1ad155e8d4c1652c00f211b52d40f3b61893419ba9 Any computer that has this package installed or running should be considered...
CVE-2025-38405
creationtimestamp| type| source ---|---|--- 2025-07-25 13:40:58+00:00| seen| Telegram/xsyXu3QszE5xrv0xfvd4LV8XlZQdF4gMJCBMPMKZPq7GZ2U...
PT-2025-30892 · Commvault · Commvault
Name of the Vulnerable Software and Affected Versions: Commvault versions 11.32.0 through 11.32.93 Commvault versions 11.36.0 through 11.36.51 Commvault versions 11.38.0 through 11.38.19 Description: An SQL injection vulnerability exists in the Web Server component that could allow a remote,...
CVE-2025-2523
creationtimestamp| type| source ---|---|--- 2025-07-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-03 2025-07-24 16:04:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lupvxrav4i24 2025-09-04 10:00:00+00:00| seen|...