MAL-2025-6855 Malicious code in simple-web-app-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c77bf97c7fa506294389252c6bdf8c7918abe5aa4b0cb2956217963d11e33a6 The OpenSSF Package Analysis project identified...

Malicious code in auth0-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bb8364e4a661d732190dea931ee1bd3aedea3c1005b1daa41507601bb281443 Any computer that has this package installed or running should be considered...

The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-21275

Windows App Package Installer Elevation of Privilege Vulnerability...

CVE-2025-21275

Technical details about CVE-2025-21275 (Windows App Package Installer Elevation of Privilege) are not provided in the supplied documents. Public specifics on affected product/version/root cause/impact/fix are not available here; monitor for authoritative updates from Microsoft/CVE records.

CVE-2025-21275 Windows App Package Installer Elevation of Privilege Vulnerability

...

Windows App Package Installer Elevation of Privilege Vulnerability

...

Malicious code in asp.app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7c024883d91bf9fdd3cb49b01873767cbb851c7b663fd2c1ac9d12030157b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cash-app-money-generator-new-2023-update-ae44sa (npm)

--- -= Per source details. Do not edit below this line.=-...

VulnCheck KEV: CVE-2023-36847

Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an...

Change Storefront to force clients to download a specific Workspace App package

When downloading Workspace App from Storefront landing page, it is pulling the most recent version instead of specific desired Workspace App package...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-32101)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Android App Verification Issues Pave Way For Phishing Attacks

A design issue in the way some popular password manager tools verify legitimate Android apps could be harnessed to help attackers launch successful phishing attacks on users. Researchers with the University of Genoa and Eurecom inspected popular mobile password tools that sync with Android...

Microsoft Windows 10: Allow a Windows app to share application data between users

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsharedlocalappdata.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Allow a Windows app to share application data between users Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...