CVE-2025-29270

Incorrect access control in the realtime.cgi endpoint of Deep Sea Electronics devices DSE855 v1.1.0 to v1.1.26 allows attackers to gain access to the admin panel and complete control of the device...

PT-2025-44587

Name of the Vulnerable Software and Affected Versions Abis Technology BAPSIS versions prior to 202510271606 Description An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' issue exists in Abis Technology BAPSIS, allowing for Blind SQL Injection. This allows...

Malicious code in ve-hemi-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...

MAL-2025-49245 Malicious code in tailwindcss-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc855ea3b9e7fe55f82bc9c967ae3e8789666f58f0a9504975e905a164c5af2 The package tailwindcss-utility was found to contain malicious code. Source: ghsa-malware...

CVE-2025-34274

Nagios Log Server (pre-2024R2.0.3) contains an execution with unnecessary privileges due to embedding a Logstash process running as root. If an attacker compromises Logstash (e.g., via insecure plugins, pipeline config injection, or input parsing vulnerabilities), they could execute code with roo...

MAL-2025-49101 Malicious code in muleforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a547ae30a3611da545a607846c864a52e6d4c02c515dc4280b5b74b841c6f8e The package muleforge was found to contain malicious code. Source: ghsa-malware 4337a4cda2c79d821c2425b131f7fbf169472e4b8b4e07a7646ed384cb7a7b2c Any...

[SECURITY] Fedora 42 Update: qt6-qtwebview-6.9.3-1.fc42

Qt WebView provides a way to display web content in a QML application without necessarily including a full web browser stack by using native APIs where it makes sense...

Malicious code in dizcordjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 679877c4e96760ae7dbd53d81c46c410bb32a9465f3288f9db08b21a127e17c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49080 Malicious code in deezcord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77b0b22c2e73948c8b7ddedeeae0ca6a7f28d81809e45d6d3cde8145a08c6d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deezcord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77b0b22c2e73948c8b7ddedeeae0ca6a7f28d81809e45d6d3cde8145a08c6d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethetsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbf1d245815ae5573ce88fea42cb604308fd2473b55ebb63f823d33796cff6bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49082 Malicious code in dizcordjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 679877c4e96760ae7dbd53d81c46c410bb32a9465f3288f9db08b21a127e17c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethesjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea9c413600cb75bea29c7e567157efcaa07b76b9efbb30cb378943bd81eb760e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-third-party-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be28c49d694fc1f5050cb2878693f651e4fd877c7c3e0ea83d08cf9a28cb5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49072 Malicious code in xo-third-party-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be28c49d694fc1f5050cb2878693f651e4fd877c7c3e0ea83d08cf9a28cb5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-form-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b076aac6d8c1d695f9ed279e4948c727abd708141c9256d1ecc0faa1f14b579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49037 Malicious code in react-naming-convention (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f1de3b293c216a9b6c48e3cdb120f41ef3a161e4aaa7be1aa115440108c0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49064 Malicious code in vuejs-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a06ba3db5dc9f82ea682ce485a98f9fe76e64ba482445a08306e872524603f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48981 Malicious code in airbnb-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cccaba4bd0c7417f30999db8ce705201039794a8ad09804f33dd1fdbe088a8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...