Malicious code in @google_cloud/precise-date (npm)

The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...

Malware in @google_cloud/precise-date

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview @googlecloud/precise-date is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-47029 Malicious code in @google_cloud/precise-date (npm)

The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...

CVE-2025-10245

creationtimestamp| type| source ---|---|--- 2025-09-11 03:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjrenwivk2c...

CVE-2025-6088

creationtimestamp| type| source ---|---|--- 2025-09-11 02:46:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjq72f4dg2t...

VulnCheck KEV: CVE-2021-37538

Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the idcategory parameter to the...

WordPress plugin "Mitfahrgelegenheit" has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-8392: Improper Neutralization of Input During Web Page Generation

The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

PT-2025-37125

The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2025-10099

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarusuariocad.php of the component Editar usuário Page. This manipulation of the argument email/datainicial/dataexpiracao causes cross site...

CVE-2025-58989

creationtimestamp| type| source ---|---|--- 2025-09-10 18:38:10+00:00| seen| Telegram/Pzrec53G8H2Sva5BmDzA24MSMh8QddRyHGtkjfBEu9Y70FI...

CVE-2025-9712

creationtimestamp| type| source ---|---|--- 2025-09-10 12:50:30+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyibipcqas2x 2025-09-11 03:14:55+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyjrshhuzs2v...

CVE-2025-10213

creationtimestamp| type| source ---|---|--- 2025-09-10 12:46:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyibbfsimj2r...

CVE-2025-10214

creationtimestamp| type| source ---|---|--- 2025-09-10 12:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiayhfnzv2r...

CVE-2025-32988

creationtimestamp| type| source ---|---|--- 2025-09-10 09:29:04+00:00| seen| https://gist.github.com/Darkcrai86/b87e14a5bc55e398469cc37b642c3272 2025-09-30 01:31:27+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeuwsiue2i 2025-10-13 02:31:29+00:00| seen|...

CVE-2025-9086

A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with just a slash as path path="/",. Since this site is not...

CVE-2025-10148

creationtimestamp| type| source ---|---|--- 2025-09-10 03:49:32+00:00| seen| https://daniel.haxx.se/blog/2025/09/10/curl-8-16-0/ 2025-09-10 03:58:42+00:00| seen| https://seclists.org/oss-sec/2025/q3/161 2025-09-10 05:58:15+00:00| seen|...

CVE-2025-59036

creationtimestamp| type| source ---|---|--- 2025-09-10 01:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh45nc2ef2r...

CVE-2025-10170

creationtimestamp| type| source ---|---|--- 2025-09-10 01:18:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh2u6z5ka2l 2026-01-08 17:12:59+00:00| published-proof-of-concept| Telegram/4CtzKjLGN2rpe0L4uqzYjissA8Lt1-eJ9QU29FfQ949wE...