CVE-2025-41086

The CVE-2025-41086 affects GAMS licensing: the licensing system validator uses an insecure checksum algorithm, allowing an attacker who knows the checksum method and license-line format to recompute a valid checksum and forge licenses. This enables unlimited valid licenses, bypassing usage restri...

Malicious code in data-xabit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b37d6663928ececa76b6d1d4a4debb3e4e4cf163a4f8604f8e16d2df90548f The package data-xabit was found to contain malicious code. Source: ghsa-malware ef666e2a6f2f7477fb30dd787eaf97877e81e62aa9bbe396639b8c7beeebc5d3 Any...

MAL-2025-191558 Malicious code in data-xabit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b37d6663928ececa76b6d1d4a4debb3e4e4cf163a4f8604f8e16d2df90548f The package data-xabit was found to contain malicious code. Source: ghsa-malware ef666e2a6f2f7477fb30dd787eaf97877e81e62aa9bbe396639b8c7beeebc5d3 Any...

MAL-2025-191555 Malicious code in ui-cluster-driver-otccce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e0c2fa1483c63a547be16744188b63b2c41acb5704b081cd0cdc46b570458 The package ui-cluster-driver-otccce was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-animated-glow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c046e67371a339da9e3c12d108f16059eb5eed933f54d51b3429a77effdcdf8a The package react-animated-glow was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191552 Malicious code in tailwind-scrollbar-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67e29aab551c12aaffda6a2fca81e67eb1a1c4a1f4e2a8f544147c7b0182b2d The package tailwind-scrollbar-plugin was found to contain malicious code. Source: ghsa-malware...

Malicious code in @shr3k/tdspt-helper-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47ecdb7596afb82ccce510809a10347891034b43f4948239690d2c0bb69b470 The package @shr3k/tdspt-helper-ng was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191541 Malicious code in bignumx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745b8508e8818e81e53f71cf2467fa31620191825b820f424eb9f86ab1e5f49e The package bignumx was found to contain malicious code. Source: ghsa-malware 98b45b53c91ebee4c77ebf3ba359608318ce17878eb8edb1cbd2a7e65238dbff Any...

CVE-2025-61229

An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls...

EUVD-2025-200025

An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls...

EUVD-2025-200016

Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Critical information retrieved: APIKEY 1 year user Session RefreshToken 10 minutes user Session Password hashed with bcrypt User IP Email Full Na...

CVE-2025-61229

An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls...

CVE-2025-13829

Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Critical information retrieved: APIKEY 1 year user Session RefreshToken 10 minutes user Session Password hashed with bcrypt User IP Email Full Na...

CVE-2025-13829

Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Critical information retrieved: APIKEY 1 year user Session RefreshToken 10 minutes user Session Password hashed with bcrypt User IP Email Full Na...

CVE-2025-13829

Incorrect Authorization vulnerability in Data Illusion Zumbrunn NGSurvey allows any logged-in user to obtain the private information of any other user. Critical information retrieved: APIKEY 1 year user Session RefreshToken 10 minutes user Session Password hashed with bcrypt User IP Email Full Na...

CVE-2025-13829

CVE-2025-13829 affects Data Illusion Zumbrunn NGSurvey and is described as an Incorrect Authorization vulnerability that lets any logged-in user access private data of other users. Publicly reported details across multiple sources (NVD, Red Hat, EUVD, CVE.org, CNNVD, etc.) enumerate sensitive dat...

PT-2025-48487

An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls...

CVE-2025-61229

Connected documents confirm a concrete vulnerability in Shirt Pocket’s SuperDuper!

PT-2025-48486

Name of the Vulnerable Software and Affected Versions Data Illusion Zumbrunn NGSurvey affected versions not specified Description An incorrect authorization issue exists in Data Illusion Zumbrunn NGSurvey, allowing any authenticated user to access the private information of other users. This...

CVE-2025-61229

An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls...