Malicious code in mark-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d23383a480fcca63e03f17e636f2b8b0ac1605237d730c7ccf159e9ea082f39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5689 Malicious code in fe-lib-localstorage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2248551164f3d70ada0fcc43237796170d7613eb7bce9bcbd718d78b64262f9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-lib-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f305a62f895c51f453506e8a82753487edc589bb9dc03f1ad92dbc3b4e64dc37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-hoc-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9891a9fd86134f0ca17dba8224c55c0e4ad7b0dbf8f5c61cce17218515d60f92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5738 Malicious code in web-shell-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14a8faa45f100dea81a84d75a0d68c5e05035913ff94a69ac46b8cd9429c5a81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jmerhi-atl/evil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91620aae25b612bc0174c38ae40a4b87860a8070824a4fbb447968986ad8c368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6785cc325eb6cfd4e41289a80a9fe1a639f54fe80387ce895053b1b983ce1aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5701 Malicious code in internallib_v555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6785cc325eb6cfd4e41289a80a9fe1a639f54fe80387ce895053b1b983ce1aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bosch-rollouts-extensions/soup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03bf5cb8a8241befda2ac9e7228f23b30a5160b0bd759c8887503d7a6b6cbb7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-tsauditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830e528439887027d65ed0697132b3f91dc2b11e553dc12671446d5f6eea1b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonskipy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825aeade17635320d2922155fc8e36ab7810c8cd83aa62a8521613534dc52e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP S/4HANA 安全漏洞

SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. A security vulnerability exists in SAP S/4HANA that originates from remote code execution and could lead to complete control of the system...

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 Improper input validation led to Remote Code Ex...

CVE-2025-3626

A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command 'OS Command Injection' while uploading a config file via webUI...

Cyclic Equalizability of Words and Its Application to Card-Based Cryptography

Card-based cryptography is a research area to implement cryptographic procedures using a deck of physical cards. In recent years, it has been found to be related to finite group theory and algebraic combinatorics, and is becoming more and more closely connected to the field of mathematics. In thi...

PT-2025-28136

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices. Recommendations: At the moment, there is no...

WAGO Device Sphere 安全漏洞

WAGO Device Sphere is a device management system from WAGO Germany. A security vulnerability exists in WAGO Device Sphere, which can be exploited by a remote, unauthenticated attacker to generate a JWT token using default certificates to gain full access...

SUR-FBD CMMS 安全漏洞

SUR-FBD CMMS is a computerized maintenance management system from the Polish company SUR-FBD. A security vulnerability exists in SUR-FBD CMMS that stems from the presence of hard-coded credentials in a DLL file, which could lead to full control of the application...

The vulnerability of the Oracle Solaris operating system’s file system allows a perpetrator to gain full control over the application.

The vulnerability of the Oracle Solaris operating system’s file system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Malicious code in vsts-iiswebapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 218ebf35158467cc942d14847b051f60d810e2ba76f2e48249bc955b0fce2e05 Any computer that has this package installed or running should be considered...