Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

Malicious code in test-syncfusion-bridge (npm)

The package test-syncfusion-bridge was found to contain malicious code...

MAL-2025-9710 Malicious code in @yotpo-platform-packages/platform-bridge (npm)

The package @yotpo-platform-packages/platform-bridge was found to contain malicious code...

MAL-2025-37050 Malicious code in tools-bridge (npm)

The package tools-bridge was found to contain malicious code...

MAL-2025-38523 Malicious code in vk-teams-bridge (npm)

The package vk-teams-bridge was found to contain malicious code...

MAL-2025-26902 Malicious code in mushroom-bridge-v60l (npm)

The package mushroom-bridge-v60l was found to contain malicious code...

MAL-2025-26917 Malicious code in mutiapp-hybrid-bridge (npm)

The package mutiapp-hybrid-bridge was found to contain malicious code...

MAL-2025-16166 Malicious code in bridge-date-tc6d (npm)

The package bridge-date-tc6d was found to contain malicious code...

MAL-2025-21494 Malicious code in gitter-irc-bridge (npm)

The package gitter-irc-bridge was found to contain malicious code...

MAL-2025-16169 Malicious code in bridge-xigua-zzn5 (npm)

The package bridge-xigua-zzn5 was found to contain malicious code...

MAL-2025-14660 Malicious code in app-bridge-core (npm)

The package app-bridge-core was found to contain malicious code...

MAL-2025-16168 Malicious code in bridge-juniper-vy43 (npm)

The package bridge-juniper-vy43 was found to contain malicious code...

MAL-2025-17335 Malicious code in com.microsoft.mixedreality.toolkit.figmabridge (npm)

The package com.microsoft.mixedreality.toolkit.figmabridge was found to contain malicious code...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

PT-2025-37231

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s bridge networking functionality where a large multicast query interval value can lead to a time overflow within the br multicast send query function...

Network Isolation Bypass

github.com/moby/moby is vulnerable to network isolation bypass. The vulnerability is due to Docker failing to re-create iptables rules isolating bridge networks after firewalld reload, which allows an attacker to access all ports of containers across different bridge networks on the same host,...

Linux Distros Unpatched Vulnerability : CVE-2024-38664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdpsub: Always register bridge We must always register the DRM bridge, since...

GO-2025-3829 Moby firewalld reload removes bridge network isolation in github.com/docker/docker

Moby firewalld reload removes bridge network isolation in github.com/docker/docker...

Linux Distros Unpatched Vulnerability : CVE-2021-47063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drmconnectorcleanup...