Malicious code in resolve-sandbox-export-daemon-gamma (npm)

The package resolve-sandbox-export-daemon-gamma was found to contain malicious code...

MAL-2025-18307 Malicious code in deserialize-slow-warn-quick-export (npm)

The package deserialize-slow-warn-quick-export was found to contain malicious code...

MAL-2025-7056 Malicious code in @amber-team/export-events-to-sheet (npm)

The package @amber-team/export-events-to-sheet was found to contain malicious code...

MAL-2025-20702 Malicious code in float-module-export-encode-parse (npm)

The package float-module-export-encode-parse was found to contain malicious code...

Malicious code in cordova-plugin-ios-no-export-compliance (npm)

The package cordova-plugin-ios-no-export-compliance was found to contain malicious code...

MAL-2025-23217 Malicious code in info-compile-cron-rho-export (npm)

The package info-compile-cron-rho-export was found to contain malicious code...

MAL-2025-36805 Malicious code in theta-nu-query-earth-export (npm)

The package theta-nu-query-earth-export was found to contain malicious code...

MAL-2025-17567 Malicious code in cordova-plugin-ios-no-export-compliance (npm)

The package cordova-plugin-ios-no-export-compliance was found to contain malicious code...

MAL-2025-20063 Malicious code in export-double-cache-benchmark-resolve (npm)

The package export-double-cache-benchmark-resolve was found to contain malicious code...

Malicious code in theta-nu-query-earth-export (npm)

The package theta-nu-query-earth-export was found to contain malicious code...

CVE-2012-10059 Dolibarr ERP/CRM Post-Auth OS Command Injection

Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sqlcompat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code...

CVE-2012-10059

Dolibarr ERP/CRM contains a post-authenticated OS command injection in its database backup feature. In versions <= 3.1.1 and

CVE-2012-10059 Dolibarr ERP/CRM Post-Auth OS Command Injection

Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php script fails to sanitize the sqlcompat parameter, allowing authenticated users to inject arbitrary system commands, resulting in remote code...

PT-2025-33094

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM versions prior to 3.1.1 Dolibarr ERP/CRM versions prior to 3.2.0 Description: Dolibarr ERP/CRM contains a post-authenticated operating system command injection issue in its database backup feature. The export.php script does...

Description of the security update for Microsoft Exchange Server 2019: August 12, 2025 (KB5063222)

None None...

Description of the security update for Microsoft Exchange Server 2019: August 12, 2025 (KB5063221)

None None...

Description of the security update for Microsoft Exchange Server 2016: August 12, 2025 (KB5063223)

None None...

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 12, 2025 (KB5063224)

None None...

CVE-2025-8767 AnWP Football Leagues <= 0.16.17 - Authenticated (Administrator+) CSV Injection

The AnWP Football Leagues plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 0.16.17 via the 'downloadcsvplayers' and 'downloadcsvgames' functions. This makes it possible for authenticated attackers, with Administrator-level access and above, to embed...

CVE-2025-8745

A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.ricepo.app. The manipulation leads to improper export of android application components. An...