MAL-2025-7052 Malicious code in @amber-team/deploy-to-gcs (npm)

The package @amber-team/deploy-to-gcs was found to contain malicious code...

MAL-2025-40376 Malicious code in yawn-cloud-llq147-project (npm)

The package yawn-cloud-llq147-project was found to contain malicious code...

MAL-2025-17166 Malicious code in cloud-quasar-qmf033-project (npm)

The package cloud-quasar-qmf033-project was found to contain malicious code...

MAL-2025-27888 Malicious code in nugget-cloud-xpq065-project (npm)

The package nugget-cloud-xpq065-project was found to contain malicious code...

MAL-2025-23070 Malicious code in imd-cloud-orders (npm)

The package imd-cloud-orders was found to contain malicious code...

MAL-2025-29125 Malicious code in phi-catch-omega-deserialize-cloud (npm)

The package phi-catch-omega-deserialize-cloud was found to contain malicious code...

MAL-2025-34706 Malicious code in tencentcloud-cos-sdk-react-native (npm)

The package tencentcloud-cos-sdk-react-native was found to contain malicious code...

MAL-2025-28474 Malicious code in orchestrate-finally-static-long-cloud (npm)

The package orchestrate-finally-static-long-cloud was found to contain malicious code...

Malicious code in hello-cloud (npm)

The package hello-cloud was found to contain malicious code...

MAL-2025-17173 Malicious code in cloud-umbra-tya835-project (npm)

The package cloud-umbra-tya835-project was found to contain malicious code...

MAL-2025-17247 Malicious code in code-cloud-zeta-cold-tau (npm)

The package code-cloud-zeta-cold-tau was found to contain malicious code...

Malicious code in glacier-cloud-yqk343-project (npm)

The package glacier-cloud-yqk343-project was found to contain malicious code...

CVE-2025-50170

Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

Have You Turned Off Your Virtual Oven?

You check that the windows are shut before leaving home. Return to the kitchen to verify that the oven and stove were definitely turned off. Maybe even circle back again to confirm the front door was properly closed. These automatic safety checks give you peace of mind because you know the unlike...

CVE-2025-49264

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login cloud-sso-single-sign-on allows PHP Local File Inclusion.This issue affects Cloud SAML SSO - Single Sign On...

CVE-2025-49264 WordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login cloud-sso-single-sign-on allows PHP Local File Inclusion.This issue affects Cloud SAML SSO - Single Sign On...

CVE-2025-49264

CVE-2025-49264 is a Local File Inclusion in the WordPress plugin Cloud SAML SSO – Single Sign On Login (versions up to 1.0.18). The flaw stems from improper control of the filename used by Include/Require, enabling potential PHP local file inclusion. Affected product version range is from n/a thr...

Generative Personalization at the Edge: The Future of E‑Commerce Isn’t (Just) in the Cloud

...

CVE-2025-8047 Multiple Plugins from itayamar - Supply Chain Compromise

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert...

CVE-2025-42955

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of...