937 matches found
Malicious code in error-ex (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f26605a6bcebfcf57f0c0d4a5309f362ad7211b4bea412366a96e93a4db054 Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-46975 Malicious code in error-ex (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f26605a6bcebfcf57f0c0d4a5309f362ad7211b4bea412366a96e93a4db054 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in @teamteanpm2024/ex-consectetur-earum (npm)
The package @teamteanpm2024/ex-consectetur-earum was found to contain malicious code...
Malicious code in @crabas0npm/ex-iste-optio-sunt (npm)
The package @crabas0npm/ex-iste-optio-sunt was found to contain malicious code...
Malicious code in @hishpr/eos-iste-ex (npm)
The package @hishpr/eos-iste-ex was found to contain malicious code...
MAL-2025-42534 Malicious code in @hishpr/eos-iste-ex (npm)
The package @hishpr/eos-iste-ex was found to contain malicious code...
Malicious code in @kollorg/ex-doloremque-sint (npm)
The package @kollorg/ex-doloremque-sint was found to contain malicious code...
Malicious code in @crabas0npm/eveniet-ex-eveniet (npm)
The package @crabas0npm/eveniet-ex-eveniet was found to contain malicious code...
Malicious code in @dramateas/sequi-ex-id-sit (npm)
The package @dramateas/sequi-ex-id-sit was found to contain malicious code...
MAL-2025-42623 Malicious code in @kollorg/ex-doloremque-sint (npm)
The package @kollorg/ex-doloremque-sint was found to contain malicious code...
MAL-2025-42256 Malicious code in @crabas0npm/eveniet-ex-eveniet (npm)
The package @crabas0npm/eveniet-ex-eveniet was found to contain malicious code...
MAL-2025-42257 Malicious code in @crabas0npm/ex-iste-optio-sunt (npm)
The package @crabas0npm/ex-iste-optio-sunt was found to contain malicious code...
MAL-2025-42903 Malicious code in @teamteanpm2024/tempora-ex-explicabo (npm)
The package @teamteanpm2024/tempora-ex-explicabo was found to contain malicious code...
MAL-2025-42786 Malicious code in @teamteanpm2024/ex-consectetur-earum (npm)
The package @teamteanpm2024/ex-consectetur-earum was found to contain malicious code...
CVE-2025-30064
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...
VulnCheck KEV: CVE-2024-21620
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's...
CVE-2025-47184
An XML external entities XXE injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1 P12, and 7.2.0 P08 allows an authenticated, unprivileged attacker to achieve information disclosure and privilege escalation via a crafted ISys XML message...
Ex-Developer Jailed Four Years for Sabotaging Ohio Employer with Kill-Switch Malware
A 55-year-old Chinese national has been sentenced to four years in prison and three years of supervised release for sabotaging his former employer's network with custom malware and deploying a kill switch that locked out employees when his account was disabled. Davis Lu, 55, of Houston, Texas, wa...
CVE-2025-47184
An XML external entities XXE injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1 P12, and 7.2.0 P08 allows an authenticated, unprivileged attacker to achieve information disclosure and privilege escalation via a crafted ISys XML message...