MAL-2025-3781 Malicious code in sw-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6e97eb66e9295d27e2c439734b0d7a8a4479ea22612dd7c5623827fcbb53eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3626 Malicious code in internallib_v921 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2d85ca5bec57f8bdf71ccddd637037d50c3a8d215c375ab6bcfba881c336175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3638 Malicious code in node-jwt-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b327dac41c47c206948d7e146a6174435ee74981c5726827f68050b3692060a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3717 Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

MAL-2025-3581 Malicious code in next-log-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfce41719d550a7097080921b8d71c939042745806269bbd66ba0e2033dee574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3387 Malicious code in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3075ed01e988b75ffe573ce85b459ad0e7a1f3a4811aeff563b24af9d9ee54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3392 Malicious code in dowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423ed02534dc5f69e700f584aa2650eeb9221a31037dbeb366660c166801552d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30740

...

CVE-2025-30737

CVE-2025-30737 affects Oracle Smart View for Office (Core Smart View) and is documented for version 24.200. The vulnerability enables a high-privileged attacker, with network access via HTTP, to compromise the product. Exploitation requires user interaction from a person other than the attacker, ...

CVE-2025-30730

The CVE-2025-30730 entry concerns Oracle E-Business Suite’s Oracle Application Object Library (Core), affected in versions 12.2.5–12.2.14. The vulnerability enables an unauthenticated attacker with network access via HTTP to cause a hang or a frequently repeatable crash (complete DoS) of Oracle A...

CVE-2025-30726

...

CVE-2025-30707

...

CVE-2025-30697

...

CVE-2025-30681

CVE-2025-30681 is a MySQL Server vulnerability in the replication component. Oracle MySQL lists affected versions as 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. It is described as easily exploitable via network access through multiple protocols, with a high-privilege attacker capable of compromis...

CVE-2025-21585

CVE-2025-21585 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected versions are 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. The vulnerability allows a high-privilege attacker with network access (via multiple protocols) to cause a hang or a frequently repeatable cr...

WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Le Ngoc Anh in WordPress Plugin PDF 2 Post versions = 2.4.0...

MAL-2025-3211 Malicious code in flex-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004deff66b34b25158642a09f2766c44910f05ec7a322c2933f768f34249151b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WPC Admin Columns plugin 2.0.6-2.1.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update vulnerability

Authenticated Subscriber+ Privilege Escalation via User Meta Update vulnerability discovered by kr0d in WordPress Plugin WPC Admin Columns versions 2.0.6-2.1.0...

CVE-2025-1677

Removed by vendor...

MAL-2025-3190 Malicious code in highcharts-mouse-wheel-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd3e7a1a5ccec6d7ad964e3183a5e78bcfd9722281b8205094e72ffcda8c26d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...