MAL-2025-33156 Malicious code in shopriver (npm)

The package shopriver was found to contain malicious code...

Malicious code in @zalastax/nolb-jso3 (npm)

The package @zalastax/nolb-jso3 was found to contain malicious code...

MAL-2025-22430 Malicious code in higirl (npm)

The package higirl was found to contain malicious code...

Malicious code in project-fbywc-mango (npm)

The package project-fbywc-mango was found to contain malicious code...

MAL-2025-29760 Malicious code in project-1qbjl-delta (npm)

The package project-1qbjl-delta was found to contain malicious code...

MAL-2025-38322 Malicious code in victor-nnt-project (npm)

The package victor-nnt-project was found to contain malicious code...

MAL-2025-11955 Malicious code in @zalastax/nolb-haro (npm)

The package @zalastax/nolb-haro was found to contain malicious code...

MAL-2025-18719 Malicious code in down-tanker (npm)

The package down-tanker was found to contain malicious code...

MAL-2025-23745 Malicious code in jest-sync-json-reporter (npm)

The package jest-sync-json-reporter was found to contain malicious code...

MAL-2025-26460 Malicious code in miranda-bunyan-testcafe-chakra-ui (npm)

The package miranda-bunyan-testcafe-chakra-ui was found to contain malicious code...

MAL-2025-13864 Malicious code in @zittertea/ducimus-exercitationem-autem (npm)

The package @zittertea/ducimus-exercitationem-autem was found to contain malicious code...

MAL-2025-20924 Malicious code in fqujyedpnshirvlk (npm)

The package fqujyedpnshirvlk was found to contain malicious code...

PT-2025-31848 · Anthropic · Filesystem Mcp Server +1

Name of the Vulnerable Software and Affected Versions: Claude affected versions not specified Description: The Claude code exhibits vulnerabilities related to path validation. The system is generally scoped to a current working directory and requests user consent when accessing unfamiliar files o...

CVE-2024-0261

A vulnerability has been found in Sentex FTPDMIN 0.96 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component RNFR Command Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed t...

LLMs Unlock New Paths to Monetizing Exploits

We argue that Large language models LLMs will soon alter the economics of cyberattacks. Instead of attacking the most commonly used software and monetizing exploits by targeting the lowest common denominator among victims, LLMs enable adversaries to launch tailored attacks on a user-by-user basis...

CVE-2024-57899: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems On 32-bit systems, the size of an unsigned long is 4 bytes, while a u64 is 8 bytes. Therefore, when using oreachsetbitbit, &bits, sizeofchanged BITSPERBYTE, the...

UBUNTU-CVE-2024-47738

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the commit ab9177d83c04 "wifi: mac80211: don't use rate mask for scanning", ignore incorrect settings to avoid no supported rate warning reported by syzbot. The...

Exploit for Path Traversal in Jenkins

Jenkins File Read Vulnerability - CVE-2024-23897 !My Shop...

CVE-2024-21685

CVE-2024-21685 affects Atlassian Jira Core Data Center. Introduced in versions 9.4.0, 9.12.0, and 9.15.0, it is a high-severity information disclosure (CVSS v3.1 base 6.5/7.4 depending on vector). An unauthenticated attacker can view sensitive data with user interaction required. Remediation from...

CVE-2024-21685

This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosur...