MAL-2025-190564 Malicious code in tailwindcss-breezium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92d0ba07d104ef809e0b5b17fe93670e80af4cceecde2f9afb14f8357febcdc The package tailwindcss-breezium was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190558 Malicious code in @profmego/alipay-babyblue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a640706a6ca7c325d86d9abee284d9184571e6208ddfd48190d12f62e5227e23 The package @profmego/alipay-babyblue was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190560 Malicious code in mongoose-odm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96769a7d9b829c0679f6d50c1f0c7cf119eb49605c5dc6d9b7b1a05c2b655c9 The package mongoose-odm was found to contain malicious code. Source: ghsa-malware f652b1e2a0f5c99554f46ab757d97e6038f7e5cac1d2c51a2a01851b744884f2 A...

Malicious code in workingstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56b24eb6e9737f361dce6ec109a95d6329de8392f296067cdc01e7f6950ddd1 The package workingstealer was found to contain malicious code. Source: ghsa-malware a5fb745fd37fc6048377cf7a40be4da1bf4751d412c4601909747d7b4ee38bb0...

Malicious code in mystealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07dcc4829f67b5eaf1fb27665849273abb5877ed274a401994d3aa5434ad2e6 The package mystealer was found to contain malicious code. Source: ghsa-malware 7efd023d7730e8b60a68685142e8d643ef789df80050b2138328616ad162387b Any...

MAL-2025-190561 Malicious code in mystealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07dcc4829f67b5eaf1fb27665849273abb5877ed274a401994d3aa5434ad2e6 The package mystealer was found to contain malicious code. Source: ghsa-malware 7efd023d7730e8b60a68685142e8d643ef789df80050b2138328616ad162387b Any...

MAL-2025-190563 Malicious code in scriptstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d290d07a0dda977b0b0ee316316349991e6f04a93648584b4f21703009e2fb8d The package scriptstealer was found to contain malicious code. Source: ghsa-malware ba731bda22f3fab9794c41e9094fc32268b0da642e5eb7ed54f575c9875ee206...

PT-2025-47409

Name of the Vulnerable Software and Affected Versions Itel DAB Gateway versions c041640a Description The Itel DAB Gateway is susceptible to an authentication bypass due to inadequate JWT JSON Web Token validation. An attacker can exploit this by reusing a valid JWT token acquired from one device ...

Eurolab ELTS100_UBX 安全漏洞

The Eurolab ELTS100UBX is a network connectivity device from Eurolab Italy. A security vulnerability exists in the Eurolab ELTS100UBX ELTS100v1.UBX version, which stems from a lack of authentication of critical management endpoints and could lead to full device control...

Student Record System add-course.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the course-short, course-full, and cdate parameters in add-course.php. An attacker can exploit this...

Itel DAB MUX 安全漏洞

Itel DAB MUX is an encoding and multiplexing all-in-one device from Itel, Italy. A security vulnerability exists in the Itel DAB MUX build c041640a version, which stems from improper JWT authentication and could lead to authentication bypass and full device control...

CVE-2025-63227

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files e.g., PHP webshells, which are stored in the /patch/ directory. This...

CVE-2025-63216

The Itel DAB Gateway IDGat build c041640a is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...

Malicious code in chai-proxify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90af91a26f042c0ac96b72df310de8ec15f6ab93634ff0547c9efb3e041cd15 The package chai-proxify was found to contain malicious code. Source: ghsa-malware 535f2bd89ddae3ece4cde5060e0e237009d5b0cdef1bce1061a3d420915b2e66 A...

Malicious code in react-native-animated-shine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5050403e37c46819e95b4473ce0825d3dfe40bf8b41941ecd666e9b5048ffb14 The package react-native-animated-shine was found to contain malicious code. Source: ghsa-malware...

Whose Narrative Is It Anyway? A KV Cache Manipulation Attack

The Key ValueKV cache is an important component for efficient inference in autoregressive Large Language Models LLMs, but its role as a representation of the model's internal state makes it a potential target for integrity attacks. This paper introduces "History Swapping," a novel block-level...

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

CVE-2024-44640

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php...

MAL-2025-190494 Malicious code in chai-test-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f220c85ce9af5bc025f22e269aaaf3af1c5853df736bcbb97331229c06b1c32 The package chai-test-async was found to contain malicious code. Source: ghsa-malware 5b8f7387cfa3c737fbb688f651f56f2174c2e831df5ded826ec25d8b7dab1bc...