Malicious Package

Overview @googlecloud/precise-date is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-47029 Malicious code in @google_cloud/precise-date (npm)

The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...

Malicious code in @google_cloud/precise-date (npm)

The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...

CVE-2025-10245

creationtimestamp| type| source ---|---|--- 2025-09-11 03:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjrenwivk2c...

CVE-2025-6088

creationtimestamp| type| source ---|---|--- 2025-09-11 02:46:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjq72f4dg2t...

VulnCheck KEV: CVE-2021-37538

Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the idcategory parameter to the...

PT-2025-37125

The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

WordPress plugin Mitfahrgelegenheit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-10099

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarusuariocad.php of the component Editar usuário Page. This manipulation of the argument email/datainicial/dataexpiracao causes cross site...

CVE-2025-58989

creationtimestamp| type| source ---|---|--- 2025-09-10 18:38:10+00:00| seen| Telegram/Pzrec53G8H2Sva5BmDzA24MSMh8QddRyHGtkjfBEu9Y70FI...

CVE-2025-9712

creationtimestamp| type| source ---|---|--- 2025-09-10 12:50:30+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyibipcqas2x 2025-09-11 03:14:55+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyjrshhuzs2v...

CVE-2025-10213

creationtimestamp| type| source ---|---|--- 2025-09-10 12:46:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyibbfsimj2r...

CVE-2025-10214

creationtimestamp| type| source ---|---|--- 2025-09-10 12:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiayhfnzv2r...

CVE-2025-32988

creationtimestamp| type| source ---|---|--- 2025-09-10 09:29:04+00:00| seen| https://gist.github.com/Darkcrai86/b87e14a5bc55e398469cc37b642c3272 2025-09-30 01:31:27+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeuwsiue2i 2025-10-13 02:31:29+00:00| seen|...

CVE-2025-9086

A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with just a slash as path path="/",. Since this site is not...

CVE-2025-10148

creationtimestamp| type| source ---|---|--- 2025-09-10 03:49:32+00:00| seen| https://daniel.haxx.se/blog/2025/09/10/curl-8-16-0/ 2025-09-10 03:58:42+00:00| seen| https://seclists.org/oss-sec/2025/q3/161 2025-09-10 05:58:15+00:00| seen|...

CVE-2025-59036

creationtimestamp| type| source ---|---|--- 2025-09-10 01:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh45nc2ef2r...

CVE-2025-10170

creationtimestamp| type| source ---|---|--- 2025-09-10 01:18:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh2u6z5ka2l 2026-01-08 17:12:59+00:00| published-proof-of-concept| Telegram/4CtzKjLGN2rpe0L4uqzYjissA8Lt1-eJ9QU29FfQ949wE...

Linux Distros Unpatched Vulnerability : CVE-2016-6742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute...

Linux Distros Unpatched Vulnerability : CVE-2021-46351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-...