Malicious code in webpack-loadcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d590321a232bcb801aa8ef974d8eca8774570f32d2f87e026c6694aff0a6bd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48427 Malicious code in batchw-test-common-config (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5e9b5b07a6f6f901ab96aa3b48d3b80dc1c0928d03c4cd4018422a15ced54b Any computer that has this package installed or running should be considered...

CVE-2025-54893 A user with elevated privileges can inject XSS in the Hosts templates configuration page

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Centreon Infra Monitoring Hosts templates configuration modules allows Stored XSS by users with elevated privileges. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from...

CVE-2025-54893 A user with elevated privileges can inject XSS in the Hosts templates configuration page

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Centreon Infra Monitoring Hosts templates configuration modules allows Stored XSS by users with elevated privileges. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from...

CVE-2025-54893

Centreon Infra Monitoring has a Stored XSS vulnerability (Improper Neutralization of Input During Web Page Generation) in the Hosts templates configuration modules. Affected versions include 23.10.0–23.10.28, 24.04.0–24.04.18, and 24.10.0–24.10.13. Exploitation requires elevated privileges and ma...

Linux Distros Unpatched Vulnerability : CVE-2025-59530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a...

Microsoft Azure Connected Machine Agent 访问控制错误漏洞

Microsoft Azure Connected Machine Agent is the ability of Microsoft Corporation USA to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent, which stems fr...

Malicious code in scr-notification-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d05f282e7a70683de50d4006c1836acb08cf541a4ff5070fb01ad3697a9875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48335 Malicious code in mad-1.2.7.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cba7624ffbb89eedecc7a43ac6061c7603bcfa4e335ba5191657b946b130a090 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS 2.0 SP11 : cloud-init (EulerOS-SA-2025-2189)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init defau...

MAL-2025-48287 Malicious code in sp-web-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18030241ea8f0cd79b1c6d323dfb7f1de0ede76c967166f73fcf51108f2ecc52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cbt-gs-switcher-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e281e2aff0b1c284640210a317cb5796b2cfb60eccbb61d04d4cfe8941d3b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48286 Malicious code in mshops-web-metrics-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ecbec2aacbd449fd0cb4b36bd3ac061312dae30f2dc01a987af141e97998523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb19ecaeacbca9e361ca15d50c99cbfa3ad023b63d06465ae2ad9d9988ab5a63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.4.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612d2c6761b96cd5e5e8c88a54cd3432e05c78ce108a922ff057dfea48b6b951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-406s9z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb13b13d0873df300143c00dbb5848905ff3dc554cb3598f946f94acb2631947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2025-11561

A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local authentication plugin sssdkrb5localauthplugin is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an...

CVE-2025-11561 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local authentication plugin sssdkrb5localauthplugin is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an...

CVE-2025-11561

A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local authentication plugin sssdkrb5localauthplugin is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an...

PT-2025-41381

Name of the Vulnerable Software and Affected Versions System Security Services Daemon SSSD affected versions not specified Description A security issue exists in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. By default, SSSD does not enable the...