MAL-2025-16499 Malicious code in canopus-jest-ini-equinox (npm)

The package canopus-jest-ini-equinox was found to contain malicious code...

MAL-2025-22501 Malicious code in hologram-ini-elara-dysonswarm (npm)

The package hologram-ini-elara-dysonswarm was found to contain malicious code...

MAL-2025-20813 Malicious code in foundation-ariel-canopus-ini (npm)

The package foundation-ariel-canopus-ini was found to contain malicious code...

MAL-2025-32355 Malicious code in rollup-global-google-ini (npm)

The package rollup-global-google-ini was found to contain malicious code...

MAL-2025-18660 Malicious code in dotenv-fusion-ini-miranda (npm)

The package dotenv-fusion-ini-miranda was found to contain malicious code...

MAL-2025-23301 Malicious code in io-ini-antares-radiometric (npm)

The package io-ini-antares-radiometric was found to contain malicious code...

MAL-2025-17108 Malicious code in cli-ini-fetch-geckodriver (npm)

The package cli-ini-fetch-geckodriver was found to contain malicious code...

MAL-2025-17417 Malicious code in commitlint-config-angular-vega-ini-figures (npm)

The package commitlint-config-angular-vega-ini-figures was found to contain malicious code...

Malicious code in cello-ini-parser (npm)

The package cello-ini-parser was found to contain malicious code...

MAL-2025-23227 Malicious code in ini-dactyl-xo-perseus (npm)

The package ini-dactyl-xo-perseus was found to contain malicious code...

MAL-2025-15481 Malicious code in barnard-ini-cryovolcano-build (npm)

The package barnard-ini-cryovolcano-build was found to contain malicious code...

MAL-2025-16710 Malicious code in cello-ini-parser (npm)

The package cello-ini-parser was found to contain malicious code...

MAL-2025-32132 Malicious code in resolvers-gridsome-ini-borealis (npm)

The package resolvers-gridsome-ini-borealis was found to contain malicious code...

MAL-2025-16457 Malicious code in callback-elektra-carpo-ini (npm)

The package callback-elektra-carpo-ini was found to contain malicious code...

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file...

CVE-2025-7381

ImpactThis is an information disclosure vulnerability originating from PHP's base image. This vulnerability exposes the PHP version through an X-Powered-By header, which attackers could exploit to fingerprint the server and identify potential weaknesses. WorkaroundsThe mitigation requires changin...

VulnCheck KEV: CVE-2024-56145

Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has registerargcargv enabled...

CVE-2024-32986

PWAsForFirefox is a tool to install, manage and use Progressive Web Apps PWAs in Mozilla Firefox. Due to improper sanitization of web app properties such as name, description, shortcuts, web apps were able to inject additional lines into XDG Desktop Entries on Linux and AppInfo.ini on...

CVE-2022-34574

An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing Tftpd32.ini...

CVE-2022-25090

Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition...