12999 matches found
CVE-2025-5310
Dover Fueling Solutions ProGauge MagLink LX Consoles expose an undocumented and unauthenticated target communication framework TCF interface on a specific port. Files can be created, deleted, or modified, potentially leading to remote code execution...
Malicious code in bootstrap-modules (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45d845a42d64eb0f9732d82ec558f52eed95f2e905ffec7f0ae2849f78104e1 Any computer that has this package installed or running should be considered...
Malicious code in my-little-package-library (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-5310 Dover Fueling Solutions ProGauge MagLink LX Consoles Missing Authentication for Critical Function
Dover Fueling Solutions ProGauge MagLink LX Consoles expose an undocumented and unauthenticated target communication framework TCF interface on a specific port. Files can be created, deleted, or modified, potentially leading to remote code execution...
CVE-2025-6521 TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm
During the initial setup of the device the user connects to an access point broadcast by the Sight Bulb Pro. During the negotiation, AES Encryption keys are passed in cleartext. If captured, an attacker may be able to decrypt communications between the management app and the Sight Bulb Pro which...
Malicious code in tableau-widgets-datagrid (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in defectdojo (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5291 Malicious code in defectdojosw (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93d614c0d808786b112774fdec4eb2b8afecef6ec8de82e4945bdc644e5023c4 The OpenSSF Package Analysis project identified 'defectdojosw' @ 10.1.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5279 Malicious code in phantom-labs-sandbox (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd1e98be0b346737740a6114c37dc7dd21cd328f21d026e07d9eb0348e43464 Any computer that has this package installed or running should be considered...
CVE-2025-5087
Kaleris NAVIS N4 ULC Ultra Light Client communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials...
MAL-2025-5309 Malicious code in meli-ai-chat-library (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fe9cef75ee52e8b6473470f69a31b8e7057f0fb632c88b89af63c14484d1c13 Any computer that has this package installed or running should be considered...
MAL-2025-5368 Malicious code in blade_background (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e0ab7bc65f47415c49500ce45a5167fd26a9eb02322a1b7d4d7d61c632c960 Any computer that has this package installed or running should be considered...
CVE-2025-48463
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering...
Malicious code in myuscis-material (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cba011b86ceb83ee613aceb9c55a91e8aabbb2df8d473962bff0b0c55879ce49 The OpenSSF Package Analysis project identified 'myuscis-material' @...
Malicious code in ce24 (npm)
The package communicates with a domain associated with malicious activity...
How to Quantify Risk and Communicate Effectively: Step 4 to TruRisk™
“The art of communication is the language of leadership.” — James Humes, former Presidential speechwriter and author. Cybersecurity teams face adversaries who thrive in chaos. Attackers move fast, automate, and strike where defenses are weakest. In a borderless digital world, disruption is...
MAL-2025-5466 Malicious code in ted-ui (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in pnp-resume (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in irradiance (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26991c136a318903b5628c9d72dc626e92359c6e2e22efbd6c656c400974f9d Any computer that has this package installed or running should be considered...