Malicious code in cp-area-nao-correntista-fgts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8095eb5ae7705ce9b30c64714683d8be1cf363c3775707e2900c35ac10eb4a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neondatabase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73494ce92c6c9b63069dc80526292563ec3c1b787487708dd8a2fb0fe8c6a240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Nmap Port Scanner 7.97

Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols UDP, TCP, ICMP, etc...

Malicious code in nimiq-supply-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 488013c68b42615c46c340c4a4ae6645cfb0bfa492440ab3d0a89018da156379 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lavanew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 574195b256d07782673f23ff2e7163f26dc2cadd4dafaf8ace366f77130bf4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-lib-t1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0656cbf9afeeae51e03fe153910e1dad3a3840f219effb0583665acdfefb34ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @klarna-travel-platform/travel-booking-shared-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f013426be635a2310d1320cacca5b4ce5067f6686d76993ed1ea4ef590315037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in krnl-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05d69f19cbdf8abd52c5c9a0197fbdc148fc4adc3a835890c3a148b1be4bf03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Do Not Preset known_hosts for the SSH Service

knownhosts stores the public keys of the computers that the host has accessed. After a user successfully logs in to another computer, the public key information is automatically saved in $HOME/.ssh/knownhosts. When the same computer is accessed next time, its public key is verified. If the...

Malicious code in jest-coverage-merge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ba5a5156001dc5905f26356e46ed61644f2bf619e0156e1a4dca3ea75fc21f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-company-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6546fa1cf98f708a73bf9fbfdaeeef7667dc18db200c8b221c4e61a1507d02a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 0x-smart-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 108d013021e63a7e7802902ab2a25aafbacf2dbea6f07c205e7d17743d8885e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24345

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request...

UBUNTU-CVE-2022-49883

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format On 64 bit host, if the guest doesn't have X86FEATURELM, KVM will access 16 gprs to 32-bit smram image, causing out-ouf-bound ram access. On 32 bit host,...

CVE-2025-24345

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request...

CVE-2025-24345

CVE-2025-24345 affects ctrlX OS web application’s Hosts functionality. A remote authenticated (low-privileged) attacker can manipulate the hosts file via a crafted HTTP request, indicating improper input/authorization handling in the Hosts feature. CVSSv3.1 base score is 6.3 (MEDIUM) with network...

CVE-2025-24345

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request...

CVE-2025-24345

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request...

Malicious code in internal-payroll-lib-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2f9ac4669489d305522859900c9fc0c92c656de17f018f9369aee637348083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Bosch Rexroth ctrlX OS 安全漏洞

Bosch Rexroth ctrlX OS is a Linux-based real-time operating system from Bosch Rexroth, an open control platform designed for industrial automation equipment. A security vulnerability exists in Bosch Rexroth ctrlX OS that stems from improper Hosts functionality, which could lead to tampering of th...