Malicious code in agate-build (npm)

The package agate-build was found to contain malicious code...

Malicious code in tapestry.build (npm)

The package tapestry.build was found to contain malicious code...

Malicious code in build-system (npm)

The package build-system was found to contain malicious code...

Malicious code in graphql-jest-cypress-build (npm)

The package graphql-jest-cypress-build was found to contain malicious code...

MAL-2025-17515 Malicious code in contentful-build-bot (npm)

The package contentful-build-bot was found to contain malicious code...

MAL-2025-25182 Malicious code in less-update-kaus-build (npm)

The package less-update-kaus-build was found to contain malicious code...

MAL-2025-25578 Malicious code in loom-plugin-package-build (npm)

The package loom-plugin-package-build was found to contain malicious code...

MAL-2025-8526 Malicious code in @malware-test-build-tazza-pasta-crush/test-mlw3-build-tazza-pasta-crush (npm)

The package @malware-test-build-tazza-pasta-crush/test-mlw3-build-tazza-pasta-crush was found to contain malicious code...

MAL-2025-16323 Malicious code in build-extremophile-hermes-mysql (npm)

The package build-extremophile-hermes-mysql was found to contain malicious code...

MAL-2025-25575 Malicious code in loom-plugin-build-library-extended (npm)

The package loom-plugin-build-library-extended was found to contain malicious code...

CVE-2025-53249

CVE-2025-53249 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Build App Online (hakeemnala Build App Online). Affected versions are up to 1.0.23; the issue enables CSRF on authenticated actions. Public sources consistently indicate remediation by upgrading to ...

CVE-2025-53249 WordPress Build App Online Plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through = 1.0.23...

CVE-2025-53249 WordPress Build App Online Plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through = 1.0.23...

CVE-2025-53581

CVE-2025-53581 is a stored XSS vulnerability in the artiosmedia RSS Feed Pro WordPress plugin (versions up to 1.1.8). The root cause is improper input neutralization during web page generation, allowing stored JavaScript in the feed output. Impact: low to moderate per CVSS 3.1 metrics (base score...

WordPress Build App Online Plugin <= 1.0.23 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by theviper17 in WordPress Plugin Build App Online versions = 1.0.23...

Malicious code in @angular_devkit/build-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...

SUSE CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

PT-2025-33370 · Unknown · Hakeemnala Build App Online

Name of the Vulnerable Software and Affected Versions: hakeemnala Build App Online versions n/a through 1.0.23 Description: A Cross-Site Request Forgery CSRF issue exists in hakeemnala Build App Online, potentially allowing attackers to perform actions on behalf of authenticated users...

WordPress plugin Build App Online 跨站请求伪造漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress plugin Build App Online 1.0.23 and prior...

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...