18628 matches found
MAL-2025-49242 Malicious code in test-bfosberry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bb2bf52f9cc862fb43efbac64ae5d928ce27cac205e83ff4afa1fe021f25bd The package test-bfosberry was found to contain malicious code...
CVE-2025-40096
creationtimestamp| type| source ---|---|--- 2025-10-30 11:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4fum7keqp2q 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0396/ 2026-04-02 17:00:00+00:00| seen|...
CVE-2025-58188
creationtimestamp| type| source ---|---|--- 2025-10-30 04:41:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4f5ik5bwg26 2025-10-30 12:01:05+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3m4fw2igeja27 2025-10-30 14:04:15+00:00| seen|...
PT-2025-44530
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2011R1.9 Description Nagios XI versions prior to 2011R1.9 are susceptible to cross-site scripting XSS. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary...
Nagios XI 安全漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2011R1.9 that stems from insufficient validatio...
Nagios XI 安全漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI CCM versions prior to 3.1.6 and Nagios XI version 5.8.8, which...
EUVD-2025-36887
Malicious code in zustand.js npm...
EUVD-2025-36757
Malicious code in react-naming-convention npm...
EUVD-2025-36784
Malicious code in wdr-beam npm...
EUVD-2025-36796
Malicious code in @gitlab-test/bun-v1 npm...
Malicious Package
Overview airbnb-babel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-36824
Malicious code in durablefunctionsmonitor-vscodeext npm...
EUVD-2025-36826
Malicious code in xo-validation npm...
CVE-2025-35980
creationtimestamp| type| source ---|---|--- 2025-10-29 21:32:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4efinz6ha2k...
CVE-2025-62789
CVE-2025-62789 affects Wazuh before 4.11.0. The fim_alert() path does not check the return value of ctime_r before calling strdup(), enabling a NULL pointer dereference that can crash analysisd when a compromised/malicious agent sends a crafted message to the Wazuh manager. Impact is denial of se...
CVE-2025-62789 Wazuh vulnerable to NULL pointer dereference in fim_alert line 712
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fimalert implementation does not check whether the return value of ctimer is NULL or not before calling strdup on it. A compromised agent can cause a crash of analysisd by sending a...
CVE-2025-64095
creationtimestamp| type| source ---|---|--- 2025-10-29 00:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4c5etmxnu22 2025-10-29 00:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5isapkw2u 2025-10-31 04:18:20+00:00| seen|...
PT-2025-44323
Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.11.0 Description Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the fim alert implementation where it does not verify if the return value of ctime r is NULL before using it with...