MAL-2025-18094 Malicious code in db-json.js (npm)

The package db-json.js was found to contain malicious code...

MAL-2025-7843 Malicious code in @epc-libraries/driver-plan-db (npm)

The package @epc-libraries/driver-plan-db was found to contain malicious code...

MAL-2025-11102 Malicious code in @zalastax/nolb-db- (npm)

The package @zalastax/nolb-db- was found to contain malicious code...

MAL-2025-21781 Malicious code in gp-db-models (npm)

The package gp-db-models was found to contain malicious code...

Malicious code in @zalastax/nolb-db- (npm)

The package @zalastax/nolb-db- was found to contain malicious code...

Malicious code in idid-db (npm)

The package idid-db was found to contain malicious code...

Malicious code in ff-db (npm)

The package ff-db was found to contain malicious code...

MAL-2025-11101 Malicious code in @zalastax/nolb-db (npm)

The package @zalastax/nolb-db was found to contain malicious code...

MAL-2025-28487 Malicious code in ords-db-mongoaws (npm)

The package ords-db-mongoaws was found to contain malicious code...

Malicious code in @zalastax/nolb-db (npm)

The package @zalastax/nolb-db was found to contain malicious code...

MAL-2025-20425 Malicious code in ff-db (npm)

The package ff-db was found to contain malicious code...

MAL-2025-27669 Malicious code in node10-earnest-db (npm)

The package node10-earnest-db was found to contain malicious code...

Malicious code in sjtu-seeryier-db (npm)

The package sjtu-seeryier-db was found to contain malicious code...

MAL-2025-33350 Malicious code in sjtu-seeryier-db (npm)

The package sjtu-seeryier-db was found to contain malicious code...

CVE-2025-50031 WordPress DB Backup <= 6.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in syedamirhussain91 DB Backup db-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DB Backup: from n/a through = 6.0...

CVE-2025-50031: Missing Authorization

Missing Authorization vulnerability in syedamirhussain91 DB Backup db-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DB Backup: from n/a through = 6.0...

CVE-2025-55194 Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...

CVE-2025-55194 Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...

CVE-2025-55194

Part-DB pre-1.17.3 allows any authenticated user to upload a profile picture with a misleading file extension (for example .jpg.txt), triggering a persistent 500 Internal Server Error when viewing or editing the user profile. This creates a Denial of Service in the user management UI for both use...

CVE-2025-55194

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...