PT-2025-34680 · Lostvip Com · Ruoyi-Go

Name of the Vulnerable Software and Affected Versions: lostvip-com ruoyi-go versions prior to 2.1 Description: A security flaw exists in the DownloadTmp/DownloadUpload function within the modules/system/controller/CommonController.go file. Manipulation of the fileName argument can lead to a path...

Rebuild 安全漏洞

Rebuild is a highly customizable enterprise management system from getrebuild open source. A security vulnerability exists in Rebuild version v3.7.7, which stems from a server-side request forgery in the type parameter of the com.rebuild.web.admin.rbstore.RBStoreControllerloadDataIndex method...

CVE-2025-9102

The CVE-2025-9102 issue affects 1&1 Mail & Media mail.com App (Android) version 8.8.0, specifically the AndroidManifest.xml of component com.mail.mobile.android.mail. Root cause: improper export of Android application components, enabling a local attacker to trigger an attack on the localhost. Pu...

CVE-2025-9093

A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android. The manipulation leads to improper export of android application components. The attack needs to be approached locally...

PT-2025-33518 · WordPress · Ithemes Serverbuddy

Name of the Vulnerable Software and Affected Versions: iThemes ServerBuddy versions n/a through 1.0.5 Description: A Cross-Site Request Forgery CSRF vulnerability exists in iThemes ServerBuddy by PluginBuddy.Com, allowing Object Injection. Recommendations: At the moment, there is no information...

Malicious code in airship.com (npm)

The package airship.com was found to contain malicious code...

Malicious code in @com-td-aacs/td (npm)

The package @com-td-aacs/td was found to contain malicious code...

Malicious code in @zalastax/nolb-com_d (npm)

The package @zalastax/nolb-comd was found to contain malicious code...

Malicious code in eaze.com (npm)

The package eaze.com was found to contain malicious code...

Malicious code in en.ephoto360.com (npm)

The package en.ephoto360.com was found to contain malicious code...

MAL-2025-7132 Malicious code in @com-td-aacs/td (npm)

The package @com-td-aacs/td was found to contain malicious code...

MAL-2025-17318 Malicious code in com.digmap.voicerecog (npm)

The package com.digmap.voicerecog was found to contain malicious code...

MAL-2025-37891 Malicious code in uolpainelcloud-painelcloud-host-uol-com-br (npm)

The package uolpainelcloud-painelcloud-host-uol-com-br was found to contain malicious code...

MAL-2025-10970 Malicious code in @zalastax/nolb-com_w (npm)

The package @zalastax/nolb-comw was found to contain malicious code...

Malicious code in com.microsoft.altspacevr_uploader (npm)

The package com.microsoft.altspacevruploader was found to contain malicious code...

Malicious code in fleet.vimcar.com (npm)

The package fleet.vimcar.com was found to contain malicious code...

MAL-2025-7137 Malicious code in @corptools-frontend/northwestregisteredagent.com (npm)

The package @corptools-frontend/northwestregisteredagent.com was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-17325 Malicious code in com.microsoft.azure.spatial-anchors-sdk.core (npm)

The package com.microsoft.azure.spatial-anchors-sdk.core was found to contain malicious code...

Malicious code in @zalastax/nolb-com_w (npm)

The package @zalastax/nolb-comw was found to contain malicious code...

Malicious code in @zalastax/nolb-com (npm)

The package @zalastax/nolb-com was found to contain malicious code...