CVE-2025-59185

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-59244

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-58153

Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge HSB may experience a lockup of the HSB. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

MAL-2025-48417 Malicious code in cryptocom-corp-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1239238ee10c3bbee24c5972edf8784d63ed06bba75e7ff07eaf23dde788c82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-34360

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

EUVD-2025-34276

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-59244

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-59185

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network...

NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network...

MAL-2025-48407 Malicious code in company-overview (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bf8d3a72c075224c157c2cf2307e520204ee333e3107d1f1b1bc6992b21dd4 Any computer that has this package installed or running should be considered...

PT-2025-42151

Name of the Vulnerable Software and Affected Versions Azure Container Instances ACI affected versions not specified Description An issue exists in Azure Container Instances where external control of a file name or path can allow an authorized attacker to elevate privileges locally. The flaw...

PT-2025-42152

Name of the Vulnerable Software and Affected Versions Azure Container Instances ACI affected versions not specified Description An issue exists in Azure Container Instances where external control of file names or paths can allow an authorized attacker to elevate privileges locally. The...

PT-2025-42077

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in Windows Core Shell that allows an unauthorized attacker to perform spoofing over a network through external control of a file name or path. Recommendations At the moment,...

PT-2025-42127

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in Windows Core Shell that allows an unauthorized attacker to perform spoofing over a network through external control of a file name or path. Recommendations At the moment,...

MAL-2025-48248 Malicious code in mad-1.4.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612d2c6761b96cd5e5e8c88a54cd3432e05c78ce108a922ff057dfea48b6b951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-10.1.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b7ae35d8522c82d7af230bc72f76eafab00194667d0a543b69f62c609e769b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48245 Malicious code in mad-1.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3660341162df2e49bb5407e0ca9b3bd7df2ef2e7aaf9c8cd43ac899b45d29b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-x2giv7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949ffee0c03450b4909e3996235aef4df042da23288be3f79bdb7a9357dcade4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48129 Malicious code in redirect-63cl4f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2812550ae381a965b1d3d0268c751c60bc5208a0bffd135bdef63456849476e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-shqv6v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51b4e79ff7698297acecee22b28fce7722c6c7173e739ee265fae8cc583dee68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...