MAL-2025-41819 Malicious code in @hpx-core-experiences/react-my-account-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07356e94cbef647858d04baaf3188c3c72ea8ba194c69b6000d0674ccaa1ac71 The OpenSSF Package Analysis project identified '@hpx-core-experiences/react-my-account-commons' @ 11.0.1 npm as malicious. It is considered...

Linux Distros Unpatched Vulnerability : CVE-2021-30888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1,...

CVE-2025-4643 Lack of JWT Expiration after Log Out in PayloadCMS

Payload uses JSON Web Tokens JWT for authentication. After log out JWT is not invalidated, which allows an attacker who has stolen or intercepted token to freely reuse it until expiration date which is by default set to 2 hours, but can be changed. This issue has been fixed in version 3.44.0 of...

wget: Fix of CVE-2024-38428

CVE-2024-38428: fix mishandle semicolons in userinfo subcomponent of URI to prevent insecure behavior...

Malicious code in azure-functions-templates-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b042b6071c2aede4bcb5d299376c83daa1a911adb92cc27204804dba0b29dbc3 The OpenSSF Package Analysis project identified 'azure-functions-templates-build' @ 1.0.0 npm as malicious. It is considered malicious because: ...

Malicious code in pp-react-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71193da54e6cdc258489d02db5987830a3bc147cbf9b43236f5757cab04f9c73 The OpenSSF Package Analysis project identified 'pp-react-grid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-42131 Malicious code in pp-react-segmented-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3aa7d1e64be7773bd65b53e4d68407a98eb87811a768245a3cb7d1dd1980516d The OpenSSF Package Analysis project identified 'pp-react-segmented-controller' @ 99.0.2 npm as malicious. It is considered malicious because: -...

Malicious code in @flight-common/models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5af2423bce8f82ab3bebfecba472bdcc04805388481ec19e96c245ca48ccd3b The OpenSSF Package Analysis project identified '@flight-common/models' @ 1.2.9213 npm as malicious. It is considered malicious because: - The...

MAL-2025-42123 Malicious code in @flight-common/models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5af2423bce8f82ab3bebfecba472bdcc04805388481ec19e96c245ca48ccd3b The OpenSSF Package Analysis project identified '@flight-common/models' @ 1.2.9213 npm as malicious. It is considered malicious because: - The...

Linux Distros Unpatched Vulnerability : CVE-2022-32546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untruste...

Linux Distros Unpatched Vulnerability : CVE-2018-11406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x befor...

PT-2025-34950 · Sangfor · Iam +2

Name of the Vulnerable Software and Affected Versions: Sangfor Behavior Management System affected versions not specified Description: The Sangfor Behavior Management System also referred to as DC Management System contains an XML external entity XXE injection vulnerability in the /src/sangforind...

Sangfor Behavior Management System 安全漏洞

Sangfor Behavior Management System is a behavior management software from China-based Sangfor. A security vulnerability exists in the Sangfor Behavior Management System that stems from an improperly configured XML parser, which could lead to internal file disclosure or server-side request forgery...

MAL-2025-41432 Malicious code in rncalltestapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6fc98db0c619f19a0f211657b4cb50fafbe8c2126e93956f356f5077b62d285d The OpenSSF Package Analysis project identified 'rncalltestapp' @ 5.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in dyff-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ff04e58382838776c99078bc025fafbd4e9eb12205055f6f89510bb28976c57 The OpenSSF Package Analysis project identified 'dyff-plugin' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in uitk_hb_button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 78827a994bce4fe2727c49ef451312308ad218c90e040d3ffec05b50385a488f The OpenSSF Package Analysis project identified 'uitkhbbutton' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

Attackers Strike Back? Not Anymore -- an Ensemble of RL Defenders Awakens for APT Detection

Advanced Persistent Threats APTs represent a growing menace to modern digital infrastructure. Unlike traditional cyberattacks, APTs are stealthy, adaptive, and long-lasting, often bypassing signature-based detection systems. This paper introduces a novel framework for APT detection that unites de...

Linux Distros Unpatched Vulnerability : CVE-2022-32545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untruste...

Linux Distros Unpatched Vulnerability : CVE-2024-31031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in coappdu.c in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow...

ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree

Summary - Target: ImageMagick commit ecc9a5eb456747374bae8e07038ba10b3d8821b3 - Type: Undefined Behavior function-type-mismatch in splay tree cloning callback - Impact: Deterministic abort under UBSan DoS in sanitizer builds. No crash in a non-sanitized build; likely low security impact. - Trigge...