Cacti < 1.2.25 Insecure Deserialization

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...

GHSA-8HFJ-J24R-96C4 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips...

GHSA-RF8J-GP6C-595Q vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MM39-X96Q-96J9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6WJ6-669X-MJRF vulnerabilities

Vulnerabilities for packages: chromium...

MAL-2026-10474 Malicious code in @dervix/engine.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118dd8f5224b1dcccddf25d74c6c9fe3543b444173ea293dafa28154e82689d5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in prettier-plugin-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4c522699877c1eca1bb9c838a443e3c4bfa21950cf5c5b1d23182ae91a534e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

ROOT-APP-NPM-GHSA-3875-8GCX-7V46 GHSA-3875-8gcx-7v46 in @rootio/n8n - Patched by Root

Root has patched GHSA-3875-8gcx-7v46 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...

Malicious code in abuden217 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fce03517a0e7a241f99d0ce806a5bb90a4f70b083a2997c80868f3bc37d4b4 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

Malicious code in abuden222 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c141ada78ccdede0bb49a76d998fcf07eb4cc60c58cce5fdc1b5933b85a817d The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...

GHSA-RR6P-3PFG-562J

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:07+00:00| seen| https://t.me/securixykz/1121 2026-07-13 00:00:18+00:00| seen| https://t.me/securixykz/1121 2026-07-14 00:01:01+00:00| published-proof-of-concept| https://t.me/securixykz/1121...

GHSA-8MG2-6588-R4HW

creationtimestamp| type| source ---|---|--- 2026-07-12 09:01:47+00:00| published-proof-of-concept| https://t.me/bdufstecru/3229 2026-07-13 00:00:48+00:00| published-proof-of-concept| https://t.me/bdufstecru/3229...

GHSA-H4G2-XFMW-Q2C9

creationtimestamp| type| source ---|---|--- 2026-07-10 23:12:24+00:00| seen| https://gist.github.com/alon710/5e2741edb2d79f8c7e4e9d0fb2942745 2026-07-11 00:01:00+00:00| seen| https://gist.github.com/alon710/5e2741edb2d79f8c7e4e9d0fb2942745...

GHSA-HG6C-8MVR-JQC9 vulnerabilities

Vulnerabilities for packages: geoserver, apache-tomee...

ROOT-APP-NPM-GHSA-64G7-MVW6-V9QJ GHSA-64g7-mvw6-v9qj in @rootio/shelljs - Patched by Root

Root has patched GHSA-64g7-mvw6-v9qj in the @rootio/shelljs package for Root:npm. Multiple fixed versions available...

GHSA-9XWW-VMQG-JH2Q vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu-melange, linux-qemu...

GHSA-WH8G-JGHW-8946 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WF3X-W2H2-VMGF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-VVH5-4937-432M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-VQW9-R72X-73GR vulnerabilities

Vulnerabilities for packages: chromium...