MAL-2025-19829 Malicious code in eslint-config-gacrux-hercules-element-ui (npm)

The package eslint-config-gacrux-hercules-element-ui was found to contain malicious code...

MAL-2025-34633 Malicious code in technocracy-native-perseus-element-ui (npm)

The package technocracy-native-perseus-element-ui was found to contain malicious code...

MAL-2025-24524 Malicious code in kinetic-inquirer-element-ui-chai (npm)

The package kinetic-inquirer-element-ui-chai was found to contain malicious code...

MAL-2025-26255 Malicious code in meteor-ursa-element-ui-supercluster (npm)

The package meteor-ursa-element-ui-supercluster was found to contain malicious code...

MAL-2025-22855 Malicious code in hyperion-element-ui-google-link (npm)

The package hyperion-element-ui-google-link was found to contain malicious code...

MAL-2025-19487 Malicious code in element-ui-rate-limiter-archaeogenetics-prosthetics (npm)

The package element-ui-rate-limiter-archaeogenetics-prosthetics was found to contain malicious code...

MAL-2025-9236 Malicious code in @plattenbau/element-ui (npm)

The package @plattenbau/element-ui was found to contain malicious code...

MAL-2025-30732 Malicious code in promise-element-ui-relay-json (npm)

The package promise-element-ui-relay-json was found to contain malicious code...

MAL-2025-23645 Malicious code in jasmine-stream-element-ui-config (npm)

The package jasmine-stream-element-ui-config was found to contain malicious code...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

PT-2025-33074

Name of the Vulnerable Software and Affected Versions: NoMachine affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system to exploi...

CVE-2025-49571

Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, ...

CVE-2025-49571 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)

Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, ...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-8800

A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esmhandlepdnconnectivityrequest of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version...

Microsoft Exchange Server Spoofing Vulnerability

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

WordPress Element Pack Elementor Addons and Templates Cross-Site Scripting Vulnerability

WordPress Element Pack Elementor Addons and Templates is a powerful plugin for Elementor designed to simplify website design. A cross-site scripting vulnerability exists in WordPress Element Pack Elementor Addons and Templates, which stems from insufficient input cleanup and output escaping of th...

VulnCheck KEV: CVE-2023-36661

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows...

Linux Distros Unpatched Vulnerability : CVE-2025-38202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Check rcureadlocktraceheld in bpfmaplookuppercpuelem bpfmaplookuppercpuelem helper is also available for sleepable bpf program. When BPF JIT is disabled or...