MAL-2025-20998 Malicious code in frost-yarn-vxi052-project (npm)

The package frost-yarn-vxi052-project was found to contain malicious code...

MAL-2025-20996 Malicious code in frost-utopia-zoo471-project (npm)

The package frost-utopia-zoo471-project was found to contain malicious code...

MAL-2025-20988 Malicious code in frost-giraffe-qit327-project (npm)

The package frost-giraffe-qit327-project was found to contain malicious code...

MAL-2025-37762 Malicious code in unicorn-vkmpt-b5mk4-frost-project (npm)

The package unicorn-vkmpt-b5mk4-frost-project was found to contain malicious code...

Malicious code in frost-forest-oow784-project (npm)

The package frost-forest-oow784-project was found to contain malicious code...

MAL-2025-20992 Malicious code in frost-patxq-y6wr4-boulder-project (npm)

The package frost-patxq-y6wr4-boulder-project was found to contain malicious code...

Malicious code in frost-utopia-zoo471-project (npm)

The package frost-utopia-zoo471-project was found to contain malicious code...

MAL-2025-20985 Malicious code in frost-dragon-jtp425-project (npm)

The package frost-dragon-jtp425-project was found to contain malicious code...

Malicious code in cascade-62nar-p4wjf-frost-project (npm)

The package cascade-62nar-p4wjf-frost-project was found to contain malicious code...

MAL-2025-20990 Malicious code in frost-lagoon-imm088-project (npm)

The package frost-lagoon-imm088-project was found to contain malicious code...

MAL-2025-32442 Malicious code in rose-bttvf-85j11-frost-project (npm)

The package rose-bttvf-85j11-frost-project was found to contain malicious code...

CVE-2019-17206

Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper aka Redis Wrapper before 0.3.0 allows attackers to execute arbitrary scripts...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +118 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (12.0.3)

org.keycloak:keycloak-core MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 - com.github.vzakharchenko:cisco-radius-plugin 1.3...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +101 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (18.0.1)

org.keycloak:keycloak-core MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 - com.github.vzakharchenko:cisco-radius-plugin 1.4...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.5.9), com.ritense.valtimo:keycloak-iam (>=9.26.1.release, <=9.26.2.release) +76 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (20.0.2)

org.keycloak:keycloak-core MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.5.9 - com.ritense.valtimo:keycloak-iam =9.26.1.release, =2.0.5...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +118 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (12.0.3)

org.keycloak:keycloak-core MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 - com.github.vzakharchenko:cisco-radius-plugin 1.3...

Frost & Sullivan recognizes Wiz as Cloud Security Posture Management leader

Research report benchmarks vendor innovation and growth performance in CSPM...

Wiz recognized by Frost and Sullivan as a leading Cloud Native Application Protection Platform for 2023

Learn why Frost & Sullivan's Frost Radar Report describes the Wiz platform "as one of the market’s most powerful cloud infrastructure security platforms."...

Wiz recognized as a 2023 Frost & Sullivan Radar Leader in Cloud Workload Protection Platform

In its 2023 Frost Radar™ analysis, Frost & Sullivan identified the top companies in the Global Cloud Workload Protection Platform CWPP market. Wiz is honored to be included on the list!...

Gaming Firms and Community Members Hit by Dark Frost Botnet

By Deeba Ahmed According to researchers, the most prominent targets of Dark Frost include gaming companies, online streaming services, game server hosting providers, and gaming community members. This is a post from HackRead.com Read the original post: Gaming Firms and Community Members Hit by Da...