PT-2025-32070 · Unknown · Communication Modules

Name of the Vulnerable Software and Affected Versions: communication module affected versions not specified Description: The vulnerability involves incomplete verification information within the communication module. Successful exploitation of this issue may affect availability. Recommendations: ...

Malicious code in thisisthedaventest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Man-in-the-Middle Attack Prevention Guide

Some of the most devastating cyberattacks don’t rely on brute force, but instead succeed through stealth. These quiet intrusions often go unnoticed until long after the attacker has disappeared. Among the most insidious are man-in-the-middle MITM attacks, where criminals exploit weaknesses in...

CVE-2025-50340

An Insecure Direct Object Reference IDOR vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated...

CVE-2025-50340

CVE-2025-50340 affects SOGo Webmail up to version 5.6.0 (authenticated IDOR). The vulnerability lets an authenticated user send emails on behalf of other users by manipulating a sender identity in the email-sending request, due to insufficient verification of authorization to use the specified se...

Whispering Agents: an Event-Driven Covert Communication Protocol for the Internet of Agents

The emergence of the Internet of Agents IoA introduces critical challenges for communication privacy in sensitive, high-stakes domains. While standard Agent-to-Agent A2A protocols secure message content, they are not designed to protect the act of communication itself, leaving agents vulnerable t...

Malicious code in node-calculator-yqhi (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in cycalculator-ybvd (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6712 Malicious code in cycalculator-ye51 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in undeface-test-5 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in zano_ui (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in amdocs-auth-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16664451db45f3a8b8da108a2b38785d0a7471480df169c57b38bccde640f7 Package name mimics an Amdocs internal package dependency-confusion lure...

MAL-2025-6675 Malicious code in undeface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa6e61be1ff207a63e7d860121269781909d89daf344c1af7875918ac2d0fa22 The OpenSSF Package Analysis project identified 'undeface' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in internal-random (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in amdocs-core-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...

Malicious code in playwright-config-pdffiller (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6671 Malicious code in @usaa-grp-payments-web-experience/bk-acknowledge-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b56c4b39f3ee1932940e85cef9f0071fc46b948628c13f5588bd484de40ab42d The OpenSSF Package Analysis project identified '@usaa-grp-payments-web-experience/bk-acknowledge-module' @ 2.9.11 npm as malicious. It is...

Malicious code in eslint-config-pdffiller-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd433611287b0e5010c855eaeac600cc58e87febefac7a8fdcb27568a25d29f2 The OpenSSF Package Analysis project identified 'eslint-config-pdffiller-typescript' @ 999.0.0 npm as malicious. It is considered malicious...

Malicious code in azuresdkpackagelist (npm)

The package communicates with a domain associated with malicious activity...

Pearcleaner 安全漏洞

Pearcleaner is a mac application cleaner tool by the individual developer Alin Lupascu. A security vulnerability exists in Pearcleaner versions 4.4.0 through 4.5.1, which stems from the XPC service exposing the Execute Arbitrary Command method, which could lead to elevation of privilege...