CVE-2025-57392

BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyone and BUILTIN\Users groups FILEALLACCESS, allowing local users to replace or modify .exe and .dll files. This may lead to privilege escalation or arbitrary code execution upon...

CVE-2025-7970

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise...

CVE-2025-59016

Error messages containing sensitive information in the File Abstraction Layer in TYPO3 CMS versions 9.0.0-9.5.54, 10.0.0-10.4.53, 11.0.0-11.5.47, 12.0.0-12.4.36, and 13.0.0-13.4.17 allow backend users to disclose full file paths via failed low-level file-system operations...

MAL-2025-47053 Malicious code in bundleliep (npm)

The package bundleliep was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 340754ac2fb58c38b60047b573870d36d4e8ffae96845c4da4f96b2ac8a43d91 Any computer that has this package installed or running should be considered fully compromise...

Malicious code in mockupnul (npm)

The package mockupnul was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4708b8e8ad3a0cbe662813ec6e76bb95f4125dc77a98dc1c39f4c5ae95321b Any computer that has this package installed or running should be considered fully compromised...

Malicious code in secured-ssh (npm)

The package secured-ssh was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2646cfd359028f95d25b02993d148c26f9a4f910b6ee2b382f6e5a38e30ca9a0 Any computer that has this package installed or running should be considered fully...

Malicious code in cornerstone_ui_core (npm)

The package cornerstoneuicore was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76275d4480426c8c60d2ef0233c3df0f042494623872c889c0e28d2212b949fe Any computer that has this package installed or running should be considered fully...

Malicious code in react-dhtml (npm)

The package react-dhtml was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97c2b33a2e3c84be9d92e70579aa195f1b65c374a13657a8ff8ba8c8a817fc24 Any computer that has this package installed or running should be considered fully...

MAL-2025-47081 Malicious code in publicrepouixxe (npm)

The package publicrepouixxe was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65248ca389c569426d0971808eab156c6812f4652e1a2a2c124f6e31cfb0da5 Any computer that has this package installed or running should be considered fully...

Malicious code in node-header-api (npm)

The package node-header-api was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737c7084e5d219ef029433bcf771c92777fbd570a1b9a22699d7e503ce664e7a Any computer that has this package installed or running should be considered fully...

Malicious code in gram-utilz (npm)

The package gram-utilz was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7c772fd2d6b9f919249def32fb96f26a08cf5bf3ebf008ab12736e774021864 Any computer that has this package installed or running should be considered fully compromise...

Malicious code in issueprocessor (npm)

The package issueprocessor was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9ae6420ddf8d5bff4f5748172ab67f3347350fab80500157005588d47f931e7 Any computer that has this package installed or running should be considered fully...

MAL-2025-47072 Malicious code in issueprocessor (npm)

The package issueprocessor was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9ae6420ddf8d5bff4f5748172ab67f3347350fab80500157005588d47f931e7 Any computer that has this package installed or running should be considered fully...

Malicious code in hrphelpall (npm)

The package hrphelpall was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0659e24ac59a9e845dfa85edafee8ebdfd35a1032ed6b06c19a7c20b80ca07c Any computer that has this package installed or running should be considered fully compromise...

MAL-2025-47037 Malicious code in @liquid-web/mileage (npm)

The package @liquid-web/mileage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8574d7642f0f1a5d62c5aec640322437ffa389e114e7cdbcf7834417d9bdab8b Any computer that has this package installed or running should be considered fully...

MAL-2025-47032 Malicious code in @liquid-web/app-services (npm)

The package @liquid-web/app-services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2360336c035ddfac0df30665d2e803482a726fbf6c47738903b8d3b7eb6c248 Any computer that has this package installed or running should be considered...

Malicious code in @liquid-web/app-services (npm)

The package @liquid-web/app-services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2360336c035ddfac0df30665d2e803482a726fbf6c47738903b8d3b7eb6c248 Any computer that has this package installed or running should be considered...

MAL-2025-47039 Malicious code in @liquid-web/services (npm)

The package @liquid-web/services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a793462c570f450eeff1a98416d2df40454d98c04a1a28a4c230f7e55dca690d Any computer that has this package installed or running should be considered fully...

CVE-2025-42922

SAP NetWeaver AS Java allows an attacker authenticated as a non-administrative user to use a flaw in an available service to upload an arbitrary file. This file when executed can lead to a full compromise of confidentiality, integrity and availability of the system...

MAL-2025-47008 Malicious code in @js-to-lua/lua-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddfe717b22bb57e4e1887887c45646abfa625e1d566049a635b86193170cdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...