PT-2025-52229

SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...

EUVD-2025-203893

Malicious code in xbox-bottomnav npm...

CVE-2025-40353

In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Do not warn if the page is already tagged in copyhighpage The arm64 copyhighpage assumes that the destination page is newly allocated and not MTE-tagged PGmtetagged unset and warns accordingly. However, following comm...

Malicious Package

Overview mona-speedy-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2025-68054

creationtimestamp| type| source ---|---|--- 2025-12-16 09:29:05+00:00| seen| https://gist.github.com/Darkcrai86/cd0e02e5dff5aa17579ba8fe5175a78b...

Linux Distros Unpatched Vulnerability : CVE-2025-40350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: RX, Fix generating skb from non-linear xdpbuff for striding RQ XDP programs can change the layout of an xdpbuff through bpfxdpadjusttail and...

CVE-2025-57919

creationtimestamp| type| source ---|---|--- 2025-12-15 12:58:40+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/al25-019-vulnerabilities-impacting-fortinet-products-forticloud-sso-login-authentication-bypass-cve-2025-59718-cve-2025-59719...

CVE-2025-9116

creationtimestamp| type| source ---|---|--- 2025-12-15 08:55:30+00:00| seen| https://gist.github.com/Darkcrai86/1dd1e83c9642f7f4e5319c0dcd70ef79...

MAL-2025-192569 Malicious code in @ikarem/telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43d2a07b55a1387aa741edace01850ec9f79a58baac8ee1897610e2b8e77cb8 The package @ikarem/telemetry was found to contain malicious code. Source: ghsa-malware...

Remote Code Execution (RCE)

Apache DolphinScheduler is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient validation of user input in alert scripts, which allows an attacker to execute arbitrary shell scripts on the server...

CVE-2025-13988

creationtimestamp| type| source ---|---|--- 2025-12-12 08:20:24+00:00| seen| https://gist.github.com/Darkcrai86/9a25adcfffb25255d6578edf1a60529c...

@cedarjs/api-server (>=1.0.0-canary.12863 <=3.0.0-canary.13332), @cedarjs/cli (>=1.0.0-canary.12863 <=3.0.0-canary.13332) +10 more potentially affected by CVE-2025-55183 +1 more via react-server-dom-webpack (>=19.2.1 <=19.2.3)

react-server-dom-webpack NPM version =19.2.1, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

CVE-2025-14535

creationtimestamp| type| source ---|---|--- 2025-12-11 19:50:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702668769020088 2025-12-12 01:35:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/115704026118128056 2025-12-12 01:35:30+00:00| seen|...

EUVD-2025-202824

Malicious code in elf-stats-cheery-northstar-345 npm...

MAL-2025-192531 Malicious code in elf-stats-sparkly-fir-398 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32db911f51c2d89fb28fbfb18ca7522203bb6e5606c84bb23665427fd481feee The package elf-stats-sparkly-fir-398 was found to contain malicious code...

MAL-2025-192508 Malicious code in elf-stats-jolly-ornament-687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c696ff217f3b5fb230585fa3669d644df5d07b6d686687fa50639da0dbaacea7 The package elf-stats-jolly-ornament-687 was found to contain malicious code...

MAL-2025-192485 Malicious code in elf-stats-cheery-northstar-345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb900180826fdc5929d1c3095198004109bd2107d02b1b6cd36c676b8aafd The package elf-stats-cheery-northstar-345 was found to contain malicious code...

EUVD-2025-202828

Malicious code in elf-stats-caroling-sled-530 npm...

EUVD-2025-202812

Malicious code in elf-stats-evergreen-workbench-842 npm...

Malicious code in elf-stats-rooftop-wishlist-723 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcbd1b32a8c043a4ffa56ddea354e9380466ad48a486654e7c7ee0581a4684f The package elf-stats-rooftop-wishlist-723 was found to contain malicious code...