CVE-2025-59476

A flaw was found in Jenkins. Improper restriction of characters inserted from user-specified content in log messages allows attackers to control log message content and misled administrators reviewing log output or hide malicious activities. Mitigation Mitigation for this issue is either not...

MAL-2025-6192 Malicious code in paypal-invoicing (npm)

Malicious package. Collects system info, exfiltrates data to hardcoded IP, runs code during preinstall, and attempts to hide activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd66aabb4b40f49dc7ef8bda42a33f705beb6def65601b8fd3025c7e055bc2e6 Any computer that...

ASB-A-352542820

In onCreateOptionsMenu of UserSettings.java, there is a possible way to remove the work profile by opening a hidden activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...