MAL-2025-32229 Malicious code in rigel-mocha-element-ui-cassini (npm)

The package rigel-mocha-element-ui-cassini was found to contain malicious code...

MAL-2025-9236 Malicious code in @plattenbau/element-ui (npm)

The package @plattenbau/element-ui was found to contain malicious code...

MAL-2025-20072 Malicious code in express-element-ui-shelljs-apollo (npm)

The package express-element-ui-shelljs-apollo was found to contain malicious code...

MAL-2025-15697 Malicious code in bioinformatics-areology-element-ui-mira (npm)

The package bioinformatics-areology-element-ui-mira was found to contain malicious code...

MAL-2025-26255 Malicious code in meteor-ursa-element-ui-supercluster (npm)

The package meteor-ursa-element-ui-supercluster was found to contain malicious code...

MAL-2025-24524 Malicious code in kinetic-inquirer-element-ui-chai (npm)

The package kinetic-inquirer-element-ui-chai was found to contain malicious code...

MAL-2025-24311 Malicious code in kardashevscale-element-ui-element-ui-cosmogenic (npm)

The package kardashevscale-element-ui-element-ui-cosmogenic was found to contain malicious code...

@wcd/gqio.angular-element-starter-kit (0.1.0), @wcd/gqio.angular-element-todo (0.1.0) +1 more potentially affected by unknown CVE via platform-browser (0.0.1-security)

platform-browser NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on platform-browser and may be impacted: - @wcd/gqio.angular-element-starter-kit 0.1.0 - @wcd/gqio.angular-element-todo 0.1.0 - clinicaamandao 1.0.0 Source cves:...

MAL-2025-22855 Malicious code in hyperion-element-ui-google-link (npm)

The package hyperion-element-ui-google-link was found to contain malicious code...

MAL-2025-14976 Malicious code in astrochemistry-element-ui-darkenergy-blaze (npm)

The package astrochemistry-element-ui-darkenergy-blaze was found to contain malicious code...

MAL-2025-19487 Malicious code in element-ui-rate-limiter-archaeogenetics-prosthetics (npm)

The package element-ui-rate-limiter-archaeogenetics-prosthetics was found to contain malicious code...

Malicious code in pegasus-element-ui-winston-event (npm)

The package pegasus-element-ui-winston-event was found to contain malicious code...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49267: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Blind SQL Injection.This issue affects Frontend Admin by DynamiApps: from n/a through = 3.28.3...

PT-2025-33074

Name of the Vulnerable Software and Affected Versions: NoMachine affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system to exploi...

CVE-2025-49571

Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, ...

CVE-2025-49571 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)

Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, ...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-8800

A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esmhandlepdnconnectivityrequest of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version...