694 matches found
CVE-2025-66384
app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmpname...
MAL-2025-191462 Malicious code in react-svgs-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081ba740ebfdae5dfc4f53bf53b7658227f6fc78a9c8866727d95d2467991f3e The package react-svgs-helper was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198319
hpke-js is a Hybrid Public Key Encryption HPKE module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal calls. This can lead to complete loss of Confidentiality...
EUVD-2025-142362
Malicious code in diva-banubo-imani npm...
Malicious code in rival-poke88 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5e0e43b9b4153ba214d06e01a54717dc8127ca7a763f82bfabbadd2bf4a2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120141
Malicious code in yaml-gatsby-yildun-less npm...
Malicious code in rehype-testcafe-iota-sails (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d5a0ef86d9d1e26796efa729b64cfdfbf09a3a2a2669f32d1e01e0b38ee963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-104830
Malicious code in hadianto-lumpur12-breki npm...
EUVD-2025-62420
Malicious code in quainttarantulaz3n npm...
EUVD-2025-53666
Malicious code in irrelevant-coffee-earthworm npm...
Security update for chromium (critical)
openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20020-1 Rating: critical References: bsc1250472 bsc1250780 bsc1251334 Cross-References: CVE-2025-10890 CVE-2025-10891 CVE-2025-10892 CVE-2025-1120...
EUVD-2025-40308
Malicious code in budi-telur21-sluey npm...
CGA-CGWP-M38Q-RX3X
Bulletin has no description...
MINI-M954-34X9-FV55
Bulletin has no description...
MINI-M8H2-GWGP-2PRX
Bulletin has no description...
MINI-945V-F59J-MVH3
Bulletin has no description...
MINI-772M-5P67-J8QR
Bulletin has no description...
MINI-7443-XMMG-RX6W
Bulletin has no description...