18629 matches found
GHSA-4J66-8F4R-3PJX
creationtimestamp| type| source ---|---|--- 2025-07-24 05:10:24+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3luorfvupsb2w...
CVE-2025-46686
creationtimestamp| type| source ---|---|--- 2025-07-23 18:33:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903980298033862 2025-07-23 21:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunwoinpsi2j...
MAL-2025-6314 Malicious code in swap-token-list-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff37669cef0c949bb0dd7b4eebab3d14891256532b09e265c1a486fb2ca0996c Any computer that has this package installed or running should be considered...
FBI and CISA Warn of Interlock Ransomware Targeting Critical Infrastructure
FBI warns of Interlock ransomware using unique tactics to hit businesses and critical infrastructure with double extortion...
MAL-2025-6267 Malicious code in @wptv/logger (npm)
The package communicates with a domain associated with malicious activity...
GHSA-25FR-JW29-74F9
creationtimestamp| type| source ---|---|--- 2025-07-22 17:43:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114898122820778282...
MAL-2025-6111 Malicious code in okx-dex (npm)
The package communicates with a domain associated with malicious activity...
Improper Access Control
github.com/grafana/grafana is vulnerable to Improper Access Control. The vulnerability is due to insufficient permission checks in the Grafana Alerting DingDing integration, which allows an attacker with Viewer permissions to access or interact with alerting configurations...
MAL-2025-6171 Malicious code in kiwi-module-browse (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa443b2926415ab44d835ed23e575a34e448c6501a1dee55d6dfa760ad0c5d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-30467
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Graphite VC6 affected versions not specified Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this...
Alert Enterprise Guardian 安全漏洞
Alert Enterprise Guardian is a physical identity and access management system open-sourced by Alert Enterprise in the United States. A security vulnerability exists in Alert Enterprise Guardian version 4.1.14.2.2.1, which originates from elevation to administrator privileges via the IsAdminApprov...
Alert Enterprise Guardian 安全漏洞
Alert Enterprise Guardian is a physical identity and access management system open-sourced by Alert Enterprise in the United States. A security vulnerability exists in Alert Enterprise Guardian version 4.1.14.2.2.1 that originates from bypassing manager approval by modifying the user ID in the...
Alert Enterprise Guardian 安全漏洞
Alert Enterprise Guardian is a physical identity and access management system open-sourced by Alert Enterprise in the United States. A security vulnerability exists in Alert Enterprise Guardian version 4.1.14.2.2.1 that originates from bypassing manager approval via isAddedByApprover in the...
CVE-2025-7831
A vulnerability classified as critical has been found in code-projects Church Donation System 1.0. This affects an unknown part of the file /members/Tithes.php. The manipulation of the argument trcode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
PT-2025-30240 · Simopro Technology · Winmatrix3 Web
Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package versions affected versions not specified Description: The WinMatrix3 Web package developed by Simopro Technology contains a Reflected Cross-site Scripting issue. This allows unauthenticated remote attackers to execute...
MAL-2025-6058 Malicious code in @toptal/picasso-quote (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6061 Malicious code in @toptal/picasso-select (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-alert (npm)
The package communicates with a domain associated with malicious activity...