Malicious code in gcp-alert-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d19b607b4f352b166f0a4c5a1e6189aca16d98607043baba144dba19d9ff70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vonage-status-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ada0aade725df8ff1808b4600aaf892c84da40d29ad87d0488895e3894712c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myexampledoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73cffbd113f766f9b5e4d0a68d2aa94c67ed0b3521da15d8afab243bdf9e24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in doges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 318e443cd5d84f016e8bfb0f1d2bafd4ccc2749c5ba81e01f0175207db159d06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CodeAstro Bus Ticket Booking System 安全漏洞

CodeAstro Bus Ticket Booking System is a bus ticket booking system from CodeAstro. A security vulnerability exists in CodeAstro Bus Ticket Booking System v1.0, which stems from insufficient input validation of the Full Name and Address fields in the user registration and user profile functionalit...

SAP NetWeaver Flaw Scores 10.0 Severity as Hackers Deploy Web Shells

A critical vulnerability CVE-2025-31324 in SAP NetWeaver Visual Composer puts systems at risk of full compromise. Learn how…...

Critical Commvault Flaw Allows Full System Takeover – Update NOW

Enterprises using Commvault Innovation Release are urged to patch immediately against CVE-2025-34028. This critical flaw allows attackers to…...

Malicious code in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3075ed01e988b75ffe573ce85b459ad0e7a1f3a4811aeff563b24af9d9ee54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3387 Malicious code in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3075ed01e988b75ffe573ce85b459ad0e7a1f3a4811aeff563b24af9d9ee54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ds-sudqusdqhsdhqsdzoqi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55eabf16c080da1e15e96342ac1293ec79b0ec3b0a1c9045829a396b3ce5c0e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3293 Malicious code in watch-test-unit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f501b9331b4c944a1dd7832349e4c20f23512f98948d44975636aa01952dc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in watch-test-unit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f501b9331b4c944a1dd7832349e4c20f23512f98948d44975636aa01952dc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vertex-lba (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a8170a76fcb89603064ada9f6b9c67cf6806bf216e81f92cfb42bb979b77053 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cantina-senior-frontend-interview-prompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fdd7c0a4b0d6eb85976e0872a078c48091ed783aa6e122254cda9a065025cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3283 Malicious code in cantina-senior-frontend-interview-prompt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fdd7c0a4b0d6eb85976e0872a078c48091ed783aa6e122254cda9a065025cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2025:20279-1 Security update for podman

This update for podman fixes the following issues: - CVE-2023-45288: Fixed closing connection when receiving too many headers bsc1236507. - CVE-2024-11218: Fixed container breakout by using --jobs=2 and a race condition when building a malicious Containerfile bsc1236270. - CVE-2025-22869: Fixed...

TOTOLINK EX1200T 安全漏洞

The TOTOLINK EX1200T is a dual-band wireless signal amplifier that is primarily used to extend the coverage of an existing wireless network. A code execution vulnerability exists in the TOTOLINK EX1200T. The vulnerability stems from the FileName parameter in the setUpgradeFW function for...

📄 Drupal 11.x-dev Path Disclosure

Drupal version 11.x-dev suffers from a path disclosure vulnerability. !/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H:...

Malicious code in test245334 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808e067f3c786b75ccf3e67abf5da82fb751cd43ac10e153de1f89c035a89ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Drupal 11.x-dev - Full Path Disclosure

!/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Version: 11.x-dev CVE:...