CVE-2025-67418

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative...

ClipBucket 安全漏洞

ClipBucket is an open source and freely downloadable PHP script from MacWarrior Open Source. It is used for sharing video sites. A security vulnerability exists in ClipBucket version 5.5.2, which stems from the hard-coded default administrative credentials that come with the product, and could...

PT-2025-52701

Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x Description The software contains an unauthenticated issue in the /usr/cgi-bin/restorefactory.cgi endpoint. Remote attackers can send a POST request to this endpoint with specific data to trigger a...

K7 Computing Ultimate Security 安全漏洞

K7 Computing Ultimate Security is a suite of antivirus software for the Windows platform from K7 Computing, USA. A security vulnerability exists in K7 Computing Ultimate Security version 17.0.2045, which stems from a local elevation of privilege that could cause a local, unprivileged user to edit...

Malicious code in github-badge-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f427bc7bcd3bfb173311bffdab461e2c6fc5350dc9ab3f7dc5e9a4ef6d16728 The package github-badge-bot was found to contain malicious code. Source: ghsa-malware f87cd6af8d38dd37db1b6aca4f637451fe3303fa73ed0705216e3711bc4d01...

Malicious code in ddos-gacor-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32622783fe9401d4c567f638a03e43b4559383e7f853ff0457f7f301420f95e9 The package ddos-gacor-v2 was found to contain malicious code. Source: ghsa-malware 3192709ec1aa7bcf745ab018eb8d6a537ace33453acda64299ef30193f8d64a9...

Malicious code in adeliana-xnetgpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f83c4bf47eb41e57e89cb19f6d28796be0fbc39ff598db3ae6f04d87500fb7a The package adeliana-xnetgpt was found to contain malicious code. Source: ghsa-malware 780aa557a66927e031b481d2f7add1e807605370d094563885c82f533a7ab7...

Malicious code in wifi-killer-xnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc233a0f06c7d7ecc69b5b2166295c9e8b63c8c05198355f8f80295907125e17 The package wifi-killer-xnet was found to contain malicious code. Source: ghsa-malware 98f1d50e89f69d69cfae05f464ddc4db1ea8e83fb48168cad1f75c87d4705a...

MAL-2025-192662 Malicious code in adeliana-xnetgpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f83c4bf47eb41e57e89cb19f6d28796be0fbc39ff598db3ae6f04d87500fb7a The package adeliana-xnetgpt was found to contain malicious code. Source: ghsa-malware 780aa557a66927e031b481d2f7add1e807605370d094563885c82f533a7ab7...

MAL-2025-192669 Malicious code in nmapchecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2e9806d703aa01275f36875831f11a74f4cd9fa31d137266c701d31c020cc8 The package nmapchecker was found to contain malicious code. Source: ghsa-malware 97029c7fd0c4fb27938f819eb6d304c50fc79713c302f835f595fe8c4d91c860 An...

MAL-2025-192660 Malicious code in @sodexo-connect/sap-cdc-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e047fc494b2206648c16c1e980cbf3aed51b9c27a8a9287cabfa869aab9095 The package @sodexo-connect/sap-cdc-client was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192673 Malicious code in xmlwtf3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc397291400d5d396c50c42966b6c482fb92a577a17ad2440c2ab4c7f0619e6 The package xmlwtf3 was found to contain malicious code. Source: ghsa-malware f1aef41363b46dac1d30ba3bd916904df95fce8278f6b3abed14f7b48002d2c8 Any...

MAL-2025-192663 Malicious code in ahmed_salem_o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccf3722bcf6828ca9cc9ed0f332cb3778d8a8be73146f96edb1d381a4649f54 The package ahmedsalemo was found to contain malicious code. Source: ghsa-malware dcde03f9a78b367c9044b92cfac2900e588491df6c7894a65c4b2658e26c7e65 An...

Malicious code in baidu-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c0014ea5fca29effc2b5cc0a04d984b9c2d557496c3ae31a5724ab6337417 The package baidu-tester was found to contain malicious code. Source: ghsa-malware e3d13abe3b7037aa5d2906857e05ea0f19837a22cf3563951cf23717228d15b2 A...

CVE-2025-67847

A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is due to insufficient validation of restore input, which leads to unintended interpretation by core restore routines. Successful exploitation could result in a...

Malicious code in vdous (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287389231a3c89843cda42ba76c0357e0f1e933cd479a9e12621a250e7014980 The package vdous was found to contain malicious code. Source: ghsa-malware db289bbb4a097deab7e11457a14affb9e2579bda9632d94fba4110f60b48ae63 Any...

MAL-2025-192656 Malicious code in xvxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049f454684721f33ed5708e112fc16145101616f1e86764d11c1768029a10902 The package xvxx was found to contain malicious code. Source: ghsa-malware 4aa766b9a17bf9902632fb988d91f1bf9e7bd4d3ef713fed70b0b3187f67d00b Any...

MAL-2025-192649 Malicious code in viktorparserctf3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c2840e0c17dd93d7212fbf45f44cc176dab955745be97cc722dbf28f642cbd The package viktorparserctf3 was found to contain malicious code. Source: ghsa-malware 70fd554f1378b0035e48dd211debb57d92eb88e7548b4e441993571ffd7b89...

MAL-2025-192652 Malicious code in viktorparserctf6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6530edbf11d75d3f778f5f5f04cd6a3de4e0c38b99f88134dd4da0eee3bdb15b The package viktorparserctf6 was found to contain malicious code. Source: ghsa-malware 6893495a85291a71df39b5938c88e2a8aa526f0f35862bba004f7e184927de...

MAL-2025-192646 Malicious code in viktor-xml-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f588bf6164c41e993943c30ac7d1a25c88c3de79469bb1a5d1a8a43448f22c31 The package viktor-xml-parser was found to contain malicious code. Source: ghsa-malware...