MAL-2025-191502 Malicious code in pluxee-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701f52cd229baaf8a44c372915a6bdbcc5510c156fb75c21d23c932d51ccde2f The package pluxee-design-system was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-200010

Malicious code in m365-action-sdk npm...

MAL-2025-191582 Malicious code in react-mandes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8242aeb2b6b10985e7b4c0a35cb731d81095b7f039aea2886d0c4c35ffa5d9ea The package react-mandes was found to contain malicious code...

MAL-2025-191574 Malicious code in eslint-lodash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e5339ebcf037bec59b58b4622230d6f22619a009685877e469b566e883248a The package eslint-lodash was found to contain malicious code...

CVE-2025-13806

creationtimestamp| type| source ---|---|--- 2025-12-01 04:33:49+00:00| seen| https://infosec.exchange/users/offseq/statuses/115642441906765257...

ASB-A-442288324

Bulletin has no description...

ASB-A-448253912

Bulletin has no description...

Malicious Package

Overview seeds-alert is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...

CVE-2025-66027

creationtimestamp| type| source ---|---|--- 2025-11-29 10:33:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/115632532223407853...

SUSE CVE-2025-64330

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a single byte read heap overflow when logging the verdict in eve.alert and eve.drop records can lead to crashes. This requires t...

Suricata Buffer Overflow DoS

The vulnerability of the Suricata intrusion detection and prevention system is related to the overflow of the buffer in the dynamic memory during the processing of evealert and eve-drop records. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Millions at risk after nationwide CodeRED alert system outage and data breach

A nationwide cyberattack against the OnSolve CodeRED emergency notifications system has prompted cities and counties across the US to warn residents and advise them to change their passwords. CodeRED is used by local governments to deliver fast, targeted alerts during severe weather, evacuations,...

CVE-2025-13742

creationtimestamp| type| source ---|---|--- 2025-11-27 12:51:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6mfvwpiba2s...

CERTFR-2025-ACT-051

creationtimestamp| type| source ---|---|--- 2025-11-27 09:18:51+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115620913416794951...

CVE-2025-64330

A flaw was found in Suricata. This vulnerability allows a denial of service DoS via a single byte read heap overflow when logging the verdict in eve.alert and eve.drop records, requiring the per packet alert queue to be filled with alerts followed by a pass rule...

PT-2025-48241

Name of the Vulnerable Software and Affected Versions Apache SkyWalking versions prior to 10.3.0 Description The software contains an Improper Neutralization of Script-Related HTML Tags in a Web Page issue, also known as a Basic Cross-Site Scripting XSS flaw. This allows attackers to inject...

CVE-2025-66035

creationtimestamp| type| source ---|---|--- 2025-11-26 23:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kyg7f3d42u 2025-11-27 02:23:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6lctzvqqy2s 2025-11-27 22:22:55+00:00| seen|...

DEBIAN-CVE-2025-64330

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a single byte read heap overflow when logging the verdict in eve.alert and eve.drop records can lead to crashes. This requires t...

CVE-2025-64330

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a single byte read heap overflow when logging the verdict in eve.alert and eve.drop records can lead to crashes. This requires t...

UBUNTU-CVE-2025-64330

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a single byte read heap overflow when logging the verdict in eve.alert and eve.drop records can lead to crashes. This requires t...