Linux Distros Unpatched Vulnerability : CVE-2020-27758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the...

Linux Distros Unpatched Vulnerability : CVE-2020-27750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by...

Linux Distros Unpatched Vulnerability : CVE-2018-8897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual SDM was mishandled in the development of some or...

MAL-2025-2020 Malicious code in vdkweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7836de93244912bbac99f38fc331aca106065b40e6eb6ba70cb26eff02acd2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2016 Malicious code in adyenaddon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4954f0f5ce68df460bab2cdeec79f35ea8d3aa5eac320bf43ed08d72b1495d0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2018 Malicious code in calculated_members_message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5529e99d26fab951551b850892343db8270230c71da1a8091e2bca79559e37f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

MAL-2025-1677 Malicious code in pages14.0.0_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed3f8870b4796bd4fc8667ec8911ddba466acaed945970ce6cf2f67e2630a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1676 Malicious code in zohodeskportalsdksampleappsreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46d46cb1be5475917e2e2ec917b43cb05d3a0382d2fc6b288f7fc02089399be5 The OpenSSF Package Analysis project identified 'zohodeskportalsdksampleappsreactnative' @ 5.1.0 npm as malicious. It is considered malicious...

MAL-2025-1675 Malicious code in azure-boards-estimate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5462c61b481e30b0b6520e0b577f7617782f0e214162c66ab8adbe0c21dfbcb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1866 Undefined Behavior Due to Out-of-Bounds Pointer Arithmetic in libwebsockets

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32...

MAL-2025-1671 Malicious code in mkdocs-material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e8872e6e833db36b43b1b63f9aa1324d6d0f193b0a0a1e352bf104215f00d4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1670 Malicious code in snap-design-system-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad4c0b89835a8fe7ca332902590a3ace5d2889d12e2d3cde10ee5dc5c695d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1663 Malicious code in react-native-windows-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c894e9ec1df07b7a9631c7a3fff0940b131f370c1e5c3d1846b7ff2398076e59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1656 Malicious code in azps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c955269826233e665b0f2e27c31b025ab3e5ab1ff1a46049d06df4c02d5a48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1655 Malicious code in secureshield4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f23bae727a469f26985689c3f9d59601b7bfd53e52b3cf2b271a56941e37af5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-JG6F-48FF-5XRW IBC-Go has Non-deterministic JSON Unmarshalling of IBC Acknowledgement

Name: ASA-2025-004: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt Component: IBC-Go Criticality: Critical Considerable Impact; Almost Certain Likelihood per ACMv1.2 Affected versions: IBC-Go = v7; Earlier IBC-Go versions may also be affected. Affected user...

IBC-Go has Non-deterministic JSON Unmarshalling of IBC Acknowledgement

Name: ASA-2025-004: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt Component: IBC-Go Criticality: Critical Considerable Impact; Almost Certain Likelihood per ACMv1.2 Affected versions: IBC-Go = v7; Earlier IBC-Go versions may also be affected. Affected user...

MAL-2025-1562 Malicious code in ufarm-evm-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac3c2b22abdad36913f270ded803406db0e6492f6747ca9177aeca19cd36aab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1560 Malicious code in huma-contracts-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcd8e55c63708841725749619d1aa01ac52fa1345eab2c6dc53f3b9f2615581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...