16082 matches found
MAL-2025-192653 Malicious code in viktorparserctf7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea8d189f98186e2482dbc1f838c4c1776defe4d30e5dedae00ee7beb3d222be The package viktorparserctf7 was found to contain malicious code. Source: ghsa-malware 18f308383dbcb39c42e9ac4c313b1a6071b4f348bd4793aa099daff963cf03...
Malicious code in test-mal-npm-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6f3e205b514fc5d9c6e98be4d3b0bf7049c38a0ff62e678584aaff50fc643 The package test-mal-npm-pkg was found to contain malicious code. Source: ghsa-malware d97b7f5012899a502ba9d154bc5f146717e56795f702823294ea3636b433c7...
MAL-2025-192636 Malicious code in ppppparserfruit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b366d76e6719092198989d8a4c7f2796fa7b475889d08f835356746bd32ca32 The package ppppparserfruit was found to contain malicious code. Source: ghsa-malware 4fd640db548f81f7a36d303c19422e90ecfa657300ff3c23d954461bbb0f8c0...
Malicious code in hubstyletokens (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270a762e8fe2aca75314b8b673b01068f64424cb56d5442954e0c44119475dff The package hubstyletokens was found to contain malicious code. Source: ghsa-malware b315d930157f2b1fd1b14cddfbd3f09759c6b275da5b51570eadff87cadf27b8...
Malicious code in okta-mfa-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebb2032d926e5816a1691e5d8260071225622a855da97c958eb62bdc038c6d9 The package okta-mfa-library was found to contain malicious code. Source: ghsa-malware 108be553f36138742a538cfeeead5e936c7b26a0ceeea8f626656acbf1bd47...
MAL-2025-192642 Malicious code in tailwind-logic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fef6c93124c5e2f579250c84fe8c1b10aaed49b5dae9bf976f00cbb20075e3a The package tailwind-logic was found to contain malicious code. Source: ghsa-malware d9321c51ef015fd1a0ba0bc9832011cb21b596ac44351ce34b11aebad63471d4...
Malicious code in tailwind-color-shine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a354c1527256b0cbb0309429b90ad036ded6b2cc1b2d29b8f2809af26f718cf7 The package tailwind-color-shine was found to contain malicious code. Source: ghsa-malware...
Malicious code in chai-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74105dd25d6c4527e469282746ab5847ca41c5f21873099aa73bcf848f99432 The package chai-async was found to contain malicious code. Source: ghsa-malware 5eadd1bc38807a3c5bcec1c37a5d1a1de8bf81bfed4a5a7ba235a1e6f8ec34aa Any...
MAL-2025-192616 Malicious code in @pluxee-design-system/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95edac344588e8262b1cfdc979c7eb4585329df2ce47b7adc45f23930971e7b The package @pluxee-design-system/core was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192611 Malicious code in ctfparsertna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cd5612214cb1fd0ed34899c5e686c4fdbecb4a820e170a3589987c20b9b3da The package ctfparsertna was found to contain malicious code. Source: ghsa-malware 90b9a48b58422c5d9853769c983bd04388558c312be191e3bfd8a82158214d38 A...
Malicious code in my-ctf-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1937327d3ed32ee35590bce097cac61388dff43915682f2fceee4e7cc074c29f The package my-ctf-package was found to contain malicious code. Source: ghsa-malware 4ffe4e6f718d8543dc984772c0f919e029ffc02ed49b70f89ba018d787408ddb...
New Microsoft e-book: 3 reasons point solutions are holding you back
While patchwork tools slow defenders down and impact visibility into potential cyberthreats, they’re an unfortunate reality for many organizations. As digital risk accelerates and attack surfaces multiply, security leaders are doing their best to stitch together point solutions while trying to...
CVE-2025-62961
CVE-2025-62961 describes a Missing Authorization / Broken Access Control vulnerability in the WordPress theme Sparkle FSE, affecting Sparkle FSE versions from n/a through 1.0.9. The connected sources consistently reference Sparkle FSE
CVE-2025-43873
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...
CVE-2025-14364
The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missing capability check on the Ajax::handlerequest function in all versions up to, and including, 2.0.8. This makes it possible for authenticated...
EUVD-2023-60216
UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assignment in the UserController. Attackers can send a crafted POST request to the admin index.php endpoint with specific parameters to generate an administrative...
CVE-2025-43873
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...
CVE-2025-43873
Johnson Controls iSTAR Ultra/Ultra SE/Ultra LT (versions prior to 6.9.7.CU01) and Ultra G2/Edge G2 (prior to 6.9.3) are affected by an OS Command Injection vulnerability in the web application that could allow an attacker to modify firmware and gain full device control. Root cause: authenticated ...
CVE-2025-43873 iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - setFaultDebounce
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...
