Malicious code in @0xzyo/confutionrce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f2d1c1c9b369aed6d0d62b32d27becf33fda24166695accd6ecf90d1ece233e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3263 Malicious code in task-bots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be184e51a3aa435812d643ea00fe1f17effc4e16bb86a0b71882fb61f69573fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3233 Malicious code in compat-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4afe39daa379d928222ec923465f7ac0593e4e1cd17e005cdccb0cbfaffe82e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3238 Malicious code in express-exp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b858cc86e409526d24e16f5f635dea2d7cae8c178366e14a5d2843bed3931ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in featureapp-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e9ff6ce07bb821d31987961d61536cdf469ba2c6f3f7a1861f96c402a900de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a857cdec809c53bf25c1227ddbd8321b2d64ff54fb9963377b146116012d1e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eco-solver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a8f7c5551c322952642a4ae7cfaa02b59bd51fd08667100bbcf22cda084b0e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in talsec-react-native-security-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ab8661116d9ec30b2582ba0a9547684e8ad10024bae79f2b4094e5ea0937d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in juvare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d66c69dea5e4d686a284a2d0f9e5260a58a90498ab4ff924f3928fe356f741a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bane-mlb/less-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708683cc4aa7a9a8a3e4e44563d46dd000b74ea5738e4aa8885e7f40e6990a53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27929

Unauthenticated attackers can retrieve full list of users associated with arbitrary accounts...

CVE-2025-30206 Dpanel's hard-coded JWT secret leads to remote code execution

Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine. This security flaw allows attackers ...

Improved MST3 Encryption Scheme Based on Small Ree Groups

This article presents an encryption scheme based on the small Ree groups. We propose utilizing the small Ree group structure to enhance the overall security parameters of the encryption scheme. By extending the logarithmic signature to encompass the entire group and modifying the encryption...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from China-based Growatt. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain a complete list of users associated with an arbitrary accou...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifsdumpfullkey CVE-2024-35866 Affected Packages: kernel Issue Correction: Run dnf update kernel --releasever 2023.7.20250414 or dnf update --advisory ALAS2023-2025-938 --releasev...

WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability

Full Path Disclosure FPD vulnerability discovered by astra.r3verii in WordPress Plugin Squeeze versions = 1.6...

CVE-2025-31003

CVE-2025-31003 affects the WordPress plugin Squeeze (versions

CVE-2025-31003 WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Bogdan Bendziukov Squeeze squeeze allows Retrieve Embedded Sensitive Data.This issue affects Squeeze: from n/a through = 1.6...

CVE-2025-31003 WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Bogdan Bendziukov Squeeze squeeze allows Retrieve Embedded Sensitive Data.This issue affects Squeeze: from n/a through = 1.6...

MAL-2025-3178 Malicious code in @medialink-ml/yuzu-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9676f94f42529927f93195df004b5ec83e0bc0487b3033ad8717fb0384fe9296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...