EUVD-2025-33425

Malicious code in redirect-x2giv7 npm...

EUVD-2025-33433

Malicious code in redirect-1wc4gw npm...

EUVD-2025-33440

Malicious code in redirect-e19jye npm...

EUVD-2025-33468

Malicious code in redirect-b9diha npm...

EUVD-2025-33508

Malicious code in redirect-shqv6v npm...

EUVD-2025-33517

Malicious code in redirect-qbzqro npm...

Malicious Package

Overview redirect-mop8sg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-33535

Malicious code in redirect-gjl674 npm...

Malicious Package

Overview redirect-1knxok is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2025-41361

Critical vulnerability alert - AWS Client VPN for macOS. Vuln info, including versions and reference links, at SecAlerts: CVE-2021-11462, CVSS 9.3 - https://t.co/8NvHlAebRR ciso cio cto vulnerabilities cybersecurity secalerts msp mssp CVE202511462 awsclient aws https://t.co/RVMw6YoXbF...

MINI-QJM3-49RV-MH76

Bulletin has no description...

EUVD-2025-32935

Malicious code in redirect-aw9itj npm...

EUVD-2025-32940

Malicious code in redirect-ht8x82 npm...

CVE-2011-3171

creationtimestamp| type| source ---|---|--- 2025-10-07 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzldbq652q...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

CVE-2025-40887

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...

CVE-2025-40886

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...

CVE-2025-40887

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...

CVE-2025-40886

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...

CVE-2025-40887

CVE-2025-40887 describes a SQL Injection in the Alert functionality of Nozomi Guardians/CMC. The issue arises from improper validation of an input parameter, enabling an authenticated user with limited privileges to run arbitrary SELECT SQL statements against the backend DBMS, potentially exposin...