MAL-2025-33507 Malicious code in snapchat-score-generator061 (npm)

The package snapchat-score-generator061 was found to contain malicious code...

MAL-2025-27432 Malicious code in nft-collection-generator-nft-collection383 (npm)

The package nft-collection-generator-nft-collection383 was found to contain malicious code...

MAL-2025-14144 Malicious code in afondevi-generator-api-cli (npm)

The package afondevi-generator-api-cli was found to contain malicious code...

MAL-2025-21262 Malicious code in generator-accelerate-couchdb (npm)

The package generator-accelerate-couchdb was found to contain malicious code...

MAL-2025-21286 Malicious code in generator-iea (npm)

The package generator-iea was found to contain malicious code...

MAL-2025-39456 Malicious code in working-new-coin-master-spins-generator-2023-for-free-dskldz (npm)

The package working-new-coin-master-spins-generator-2023-for-free-dskldz was found to contain malicious code...

MAL-2025-21271 Malicious code in generator-angular-cli-library (npm)

The package generator-angular-cli-library was found to contain malicious code...

MAL-2025-7047 Malicious code in @ag2rlamondiale/appversion-generator (npm)

The package @ag2rlamondiale/appversion-generator was found to contain malicious code...

MAL-2025-21309 Malicious code in generator-torbjorn (npm)

The package generator-torbjorn was found to contain malicious code...

MAL-2025-16620 Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-www (npm)

The package cash-app-money-generator-new-updated-2023-nhfy702r-www was found to contain malicious code...

MAL-2025-25725 Malicious code in lyst-product-card-generator (npm)

The package lyst-product-card-generator was found to contain malicious code...

CVE-2025-20613

Predictable Seed in Pseudo-Random Number Generator PRNG in the firmware for some IntelR TDX may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-8621

The Mosaic Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘c’ parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

CVE-2025-8685

The Wp chart generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpchart shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-20613

Predictable Seed in Pseudo-Random Number Generator PRNG in the firmware for some IntelR TDX may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-20613

CVE-2025-20613 affects Intel® TDX firmware. A predictable seed in the firmware PRNG may allow an authenticated local user to cause information disclosure. Intel lists Intel® TDX firmware vulnerabilities and provides firmware updates as the mitigation; affected Intel Xeon® processors prior to upda...

CVE-2025-8685

The Wp chart generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpchart shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-8621

The Mosaic Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘c’ parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

CVE-2025-8568

The GMap Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘h’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8568

The CVE-2025-8568 entry relates to the WordPress GMap Generator (Venturit) plugin, with a Stored Cross-Site Scripting vulnerability in the h parameter affecting all versions up to 1.1. The root cause is insufficient input sanitization and output escaping, allowing authenticated attackers with Con...