31952 matches found
MAL-2025-48550 Malicious code in doppler-secrets-fetch-github-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae1d785262a986eb630a24e7abcd16bd4c799262e11059e5911a40f184ee5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35311
Malicious code in doppler-secrets-fetch-github-action npm...
CVE-2025-62595
creationtimestamp| type| source ---|---|--- 2025-10-21 06:58:44+00:00| published-proof-of-concept| https://github.com/koajs/koa/security/advisories/GHSA-g8mr-fgfg-5qpc...
Evaluating Large Language Models in Detecting Secrets in Android Apps
Mobile apps often embed authentication secrets, such as API keys, tokens, and client IDs, to integrate with cloud services. However, developers often hardcode these credentials into Android apps, exposing them to extraction through reverse engineering. Once compromised, adversaries can exploit...
CVE-2025-11750
creationtimestamp| type| source ---|---|--- 2025-10-20 16:29:40+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-11750.yaml 2025-10-22 15:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3s6ui7prz2o 2025-10-22...
CVE-2019-16072
creationtimestamp| type| source ---|---|--- 2025-10-19 23:53:37+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-16072.yaml 2025-10-24 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj3jgc423...
GHSA-RP2M-Q4J6-GR43
creationtimestamp| type| source ---|---|--- 2025-10-17 18:01:14+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115390812802193403...
CVE-2025-62505
creationtimestamp| type| source ---|---|--- 2025-10-17 09:26:18+00:00| published-proof-of-concept| https://github.com/lobehub/lobehub/security/advisories/GHSA-fgx4-p8xf-qhp9...
CVE-2025-62171
creationtimestamp| type| source ---|---|--- 2025-10-17 09:03:16+00:00| published-proof-of-concept| https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9pp9-cfwx-54rm 2025-11-21 08:14:25+00:00| seen| https://gist.github.com/Darkcrai86/e83bbf1032d43d201a7187639bff59d1 2025-11-21...
GHSA-J253-W29R-9M48
creationtimestamp| type| source ---|---|--- 2025-10-17 06:21:20+00:00| seen| Telegram/W1TUsVVnntbTzk7O6kK2RdxwWVsGfPzeLKbF7bgeKBqWqCU...
CVE-2025-62418
creationtimestamp| type| source ---|---|--- 2025-10-16 20:41:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-fg89-g389-p346...
CVE-2025-62416
creationtimestamp| type| source ---|---|--- 2025-10-16 20:28:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-527q-4wqv-g9wj...
CVE-2025-59288
Improper verification of cryptographic signature in GitHub allows an unauthorized attacker to perform spoofing over an adjacent network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising eas...
CVE-2025-62381
creationtimestamp| type| source ---|---|--- 2025-10-15 17:03:21+00:00| published-proof-of-concept| https://github.com/ciscoheat/sveltekit-superforms/security/advisories/GHSA-hwmc-4c8j-xxj7...
CVE-2025-62379
Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace endpoint automatically assigns the redirectto query parameter value directly to client-side links without any validation and triggers automatic clicks when the page loads in a...
GHSA-5RRX-JJJQ-Q2R5
creationtimestamp| type| source ---|---|--- 2025-10-15 11:35:09+00:00| seen| https://bsky.app/profile/appsecfeed.bsky.social/post/3m3a5mcs3go2d 2025-10-24 11:40:04+00:00| seen| https://gist.github.com/dhmosfunk/0b74940802f1c0e6b4e39101b301072c...
CVE-2025-10754
creationtimestamp| type| source ---|---|--- 2025-10-15 11:32:27+00:00| seen| https://gist.github.com/Darkcrai86/69ab8d1a570cdb2b09d3ca1400494869...
CVE-2025-11722
creationtimestamp| type| source ---|---|--- 2025-10-15 11:31:09+00:00| seen| https://gist.github.com/Darkcrai86/bc6157705c0d97bdf36661c948e61b7a...
CVE-2025-11756
creationtimestamp| type| source ---|---|--- 2025-10-15 06:34:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m37mryz2e72b 2025-10-15 06:52:44+00:00| seen| https://gist.github.com/Darkcrai86/7821ec429c64ac89b1840d7e4882c31e 2025-10-15 21:04:29+00:00| seen|...