MAL-2025-5051 Malicious code in react-expiry-date (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 744273ea7bca5335d9f20514a81c835c0cad1558b2b206721aed050a41f0acea Any computer that has this package installed or running should be considered...

Malicious code in react-expiry-date (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 744273ea7bca5335d9f20514a81c835c0cad1558b2b206721aed050a41f0acea Any computer that has this package installed or running should be considered...

openSUSE Security Advisory (SUSE-SU-2025:01884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:01878-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:01889-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-86XF-2MGP-GV3G

creationtimestamp| type| source ---|---|--- 2025-06-12 19:33:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18218 2025-06-12 19:34:31+00:00| seen| Telegram/pmCQczjONs0GfJ4fUtzY9Rs7uNvrLwRQOu1OBXvD7CpRkk...

CVE-2025-49578

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...

CVE-2025-49578 Citizen allows stored XSS in user registration date message

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...

CVE-2025-49578

Citizen is a MediaWiki skin. CVE-2025-49578 describes an XSS where date messages produced by Language::userDate are inserted into raw HTML, enabling stored XSS on wikis where a user has the editinterface right but not the editsitejs right. The issue affects Citizen versions prior to 3.3.1 and is ...

CVE-2025-49578 Citizen allows stored XSS in user registration date message

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by Language::userDate are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the...

CVE-2024-44905

creationtimestamp| type| source ---|---|--- 2025-06-12 16:34:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18198 2025-06-12 17:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrgfozgvfb2e...

CVE-2025-49196

creationtimestamp| type| source ---|---|--- 2025-06-12 15:34:18+00:00| seen| Telegram/wgoTb5XaYjt4edW9eGqUUS797b0TcQmpar0c1bJk2kSM 2025-06-13 06:36:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18264...

CVE-2025-46035

creationtimestamp| type| source ---|---|--- 2025-06-12 15:33:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18175 2025-06-12 17:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrgg5g2jhk2s 2025-06-13 05:38:09+00:00| seen|...

CVE-2025-41234

creationtimestamp| type| source ---|---|--- 2025-06-12 13:49:06+00:00| seen| https://bsky.app/profile/snicoll.be/post/3lrg2sogpfc2a 2025-06-12 16:11:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lrgcrqkre52f 2025-06-12 21:34:38+00:00| seen|...

CVE-2025-2254

creationtimestamp| type| source ---|---|--- 2025-06-12 10:33:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18158 2025-06-12 11:35:08+00:00| published-proof-of-concept| Telegram/fiao7xA0oH91C7wjAlMQ2SU0Cic3eA9k5t4dM3RPWX96YFU 2025-06-12 11:43:16+00:00| seen|...

CVE-2025-21865

creationtimestamp| type| source ---|---|--- 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05...

CVE-2025-49815

creationtimestamp| type| source ---|---|--- 2025-06-12 05:54:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrfabq3ixz2e...

CVE-2025-49819

creationtimestamp| type| source ---|---|--- 2025-06-12 05:47:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrf7wepavb2u...

CVE-2025-49820

creationtimestamp| type| source ---|---|--- 2025-06-12 05:40:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrf7iuhmym2m...

CVE-2025-6009

creationtimestamp| type| source ---|---|--- 2025-06-12 03:34:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18144 2025-06-12 05:48:56+00:00| published-proof-of-concept| Telegram/1Aa4wx5C77-QnNp1HoIjIHD7JstDp4QgHQR99I-iOvE2Mo 2025-06-12 06:22:25+00:00| seen|...