MAL-2025-23532 Malicious code in jacket-arctic-dwo959-project (npm)

The package jacket-arctic-dwo959-project was found to contain malicious code...

MAL-2025-15942 Malicious code in bonfire-arctic-jzf710-project (npm)

The package bonfire-arctic-jzf710-project was found to contain malicious code...

MAL-2025-23403 Malicious code in island-arctic-zmw994-project (npm)

The package island-arctic-zmw994-project was found to contain malicious code...

MAL-2025-27947 Malicious code in nymph-arctic-yyc372-project (npm)

The package nymph-arctic-yyc372-project was found to contain malicious code...

MAL-2025-14799 Malicious code in arctic-unicorn-qdk488-project (npm)

The package arctic-unicorn-qdk488-project was found to contain malicious code...

MAL-2025-14798 Malicious code in arctic-river-nts792-project (npm)

The package arctic-river-nts792-project was found to contain malicious code...

MAL-2025-14796 Malicious code in arctic-opal-xxr872-project (npm)

The package arctic-opal-xxr872-project was found to contain malicious code...

MAL-2025-14793 Malicious code in arctic-kale-ntw066-project (npm)

The package arctic-kale-ntw066-project was found to contain malicious code...

MAL-2025-16645 Malicious code in cat-arctic-vcq912-project (npm)

The package cat-arctic-vcq912-project was found to contain malicious code...

CVE-2011-3705

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by acp/includes/edit.inc.php and certain other files...

CISA Releases Ten Industrial Control Systems Advisories

CISA released ten Industrial Control Systems ICS advisories on April 10, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-100-01 Siemens License Server ICSA-25-100-02 Siemens SIDIS Prime ICSA-25-100-03 Siemens...

ABB Arctic Wireless Gateways

SUMMARY ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This could lead to denial of...

CVE-2024-12867

Server-Side Request Forgery in URL Mapper in Arctic Security's Arctic Hub versions 3.0.1764-5.6.1877 allows an unauthenticated remote attacker to exfiltrate and modify configurations and data...

CVE-2024-12867 Server-Side Request Forgery in Arctic Hub URL Mapper allows an unauthenticated remote attacker to exfiltrate and modify configurations and data

Server-Side Request Forgery in URL Mapper in Arctic Security's Arctic Hub versions 3.0.1764-5.6.1877 allows an unauthenticated remote attacker to exfiltrate and modify configurations and data...

CVE-2024-12867 Server-Side Request Forgery in Arctic Hub URL Mapper allows an unauthenticated remote attacker to exfiltrate and modify configurations and data

Server-Side Request Forgery in URL Mapper in Arctic Security's Arctic Hub versions 3.0.1764-5.6.1877 allows an unauthenticated remote attacker to exfiltrate and modify configurations and data...

CVE-2024-12867

CVE-2024-12867 describes a Server-Side Request Forgery in the URL Mapper of Arctic Security’s Arctic Hub, affecting versions 3.0.1764 through 5.6.1877. An unauthenticated remote attacker can exfiltrate and modify configurations and data. Technical details across connected sources confirm the vuln...

PT-2024-17769 · Arctic Security · Arctic Hub

Name of the Vulnerable Software and Affected Versions: Arctic Security's Arctic Hub versions 3.0.1764 through 5.6.1877 Description: A Server-Side Request Forgery issue exists in the URL Mapper of Arctic Security's Arctic Hub, allowing an unauthenticated remote attacker to exfiltrate and modify...

Arctic Security Arctic Hub 代码问题漏洞

Arctic Security Arctic Hub is a cyber defense solution for CERTs, CSIRTs and MSSPs from Arctic Security. A code issue vulnerability exists in Arctic Security Arctic Hub versions 3.0.1764-5.6.1877. A remote attacker could exploit the vulnerability to steal and modify configuration and data...

webmap.arcticconnect.ca Cross Site Scripting vulnerability OBB-3938618

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

arctic-report.net Cross Site Scripting vulnerability OBB-3918513

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...