MAL-2025-190580 Malicious code in lululemon-b2b-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05944949ea944b00cec776df6ca73a7d3cdb15f30d578047b75225e8c04cb45 The package lululemon-b2b-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in lululemon-b2b-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05944949ea944b00cec776df6ca73a7d3cdb15f30d578047b75225e8c04cb45 The package lululemon-b2b-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in hellospa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...

CVE-2025-61713

A Cleartext Storage of Sensitive Information in Memory vulnerability CWE-316 in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated...

CVE-2025-46775

A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log...

CVE-2025-46776

A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or comman...

CVE-2025-34335 AudioCodes Fax/IVR Appliance <= 2.6.23 Authenticated Command Injection via ActivateLicense.php

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflow handled by AudioCodesfiles/ActivateLicense.php. When a license file is uploaded, the application derives a new...

CVE-2025-63258

A remote command execution RCE vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series routers, cloud gateways, and wireless access points versions R0162P07, UAP700-WPT330-E2265, UAP672-WPT330-R2262, UAP662E-WPT330-R2262P03, WAP611-WPT330-R1348-OASIS,...

Malicious code in node-calculator-cf8c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da96ce055040828362e8a000e3ad2e1a1647b7d3faa0c4383c260d6044bef7d The package node-calculator-cf8c was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in alicenpmpackage13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4183158dd9ab68784bc126821795cf166b7f2c828d67f46efc533d3859a4342 The package alicenpmpackage13 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190577 Malicious code in alicenpmpackage13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4183158dd9ab68784bc126821795cf166b7f2c828d67f46efc533d3859a4342 The package alicenpmpackage13 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in alicenpmpackage1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6f807461a8da92854705819f1e63af5d1951c52d255a565e6d70c4b5a21fd3 The package alicenpmpackage1 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190576 Malicious code in alicenpmpackage1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6f807461a8da92854705819f1e63af5d1951c52d255a565e6d70c4b5a21fd3 The package alicenpmpackage1 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-8bf9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b1f195cda1193bb7e83d1da57c34d1a22ca912d27dbb065199754dcc8c47f8 The package node-calculator-8bf9 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190570 Malicious code in node-calculator-8bf9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b1f195cda1193bb7e83d1da57c34d1a22ca912d27dbb065199754dcc8c47f8 The package node-calculator-8bf9 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-b0e4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e25d2464b2da9bfb7e629441757f1d413f8e1cf4a38522f2316ef84755e59 The package node-calculator-b0e4 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in werufgugweuiguiwergqui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0713cad30ef783b4e799858b0b42ec77487f58a9ab6ac77c9941ee1f3bdf8b The package werufgugweuiguiwergqui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in kc-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...

MAL-2025-190574 Malicious code in kc-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...

CVE-2025-63932

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...