CVE-2025-52483

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities a shell script injection can occur within the...

CVE-2025-52483 Registrator.jl Vulnerable to Argument Injection and Command Injection

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities a shell script injection can occur within the...

CVE-2025-52480 Registrator.jl Argument Injection Vulnerability

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, an argument injection is possible in the...

CVE-2025-52480

CVE-2025-52480 affects Registrator.jl. If the clone URL from GitHub is malicious (or injected via upstream vulnerabilities), an argument injection in the gettreesha() function can enable remote code execution. Impact is described as a potential RCE; affected versions are prior to 1.9.5. Remediati...

MAL-2025-5379 Malicious code in collab-app (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in collab-app (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bar.app.bar_rights (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d42cf077f7eef742c0cd55680d97ae121015d7f7a43d7b81fc35ce75333b382 Any computer that has this package installed or running should be considered...

CVE-2024-51980

creationtimestamp| type| source ---|---|--- 2025-06-25 07:50:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19424 2025-06-25 12:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgn5l4xm62i 2025-06-27 19:17:18+00:00| seen| https://t.me/icscert/1204...

Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

MAL-2025-5273 Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

CVE-2025-6651

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-436/ 2025-06-25 21:50:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19538 2025-06-26 01:08:11+00:00| seen|...

[SECURITY] Fedora 42 Update: gotify-desktop-1.3.7-5.fc42

Small Gotify daemon to receive messages and forward them as desktop notificat ions. Read Gotify messages, and forward them as standard desktop notification . Forward message priority. Auto reconnect if server connection is lost and g et missed messages. Automatically download, cache, and show app...

PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Azure App Services Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within Azure App Services. The issue results from the exposure of sensitive information...

CVE-2025-52888

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19409 2025-06-24 22:34:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5qxgm7c2o...

CVE-2025-52471

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19404 2025-06-25 01:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfgyxmup22a...

CVE-2025-52571

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19403 2025-06-24 21:24:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsezue3amb2k 2026-08-14 16:00:11+00:00| seen| https://t.me/purpsec/812...

CVE-2025-45880

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19402 2025-06-25 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dpyzc2s...

CVE-2025-6555

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19396 2025-06-24 22:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf54lq3ew2i 2025-06-25 05:12:33+00:00| seen|...

SparkKitty Spyware on App Store and Play Store, Steals Photos for Crypto Data

Kaspersky uncovers SparkKitty, new spyware in Apple App Store & Google Play. Steals photos, targets crypto info, active since early 2024 via malicious apps...