MAL-2025-25569 Malicious code in long-boolean-thread-notify-fast (npm)

The package long-boolean-thread-notify-fast was found to contain malicious code...

MAL-2025-41016 Malicious code in zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln (npm)

The package zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm)

The package zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir was found to contain malicious code...

Malicious code in alb-um-availa-ble-zip-mp3-file-2013-9765-night-time-my-time-8wmqr-nytqyh (npm)

The package alb-um-availa-ble-zip-mp3-file-2013-9765-night-time-my-time-8wmqr-nytqyh was found to contain malicious code...

Malicious code in view-epsilon-kernel-boolean-long (npm)

The package view-epsilon-kernel-boolean-long was found to contain malicious code...

Malicious code in alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc (npm)

The package alb-um-availa-ble-zip-mp3-file-54131-not-for-threes-53dbe-butthc was found to contain malicious code...

Malicious code in zero-hot-long-simple-integer (npm)

The package zero-hot-long-simple-integer was found to contain malicious code...

Malicious code in private-epsilon-unix-long-kernel (npm)

The package private-epsilon-unix-long-kernel was found to contain malicious code...

Malicious code in alb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwu (npm)

The package alb-um-availa-ble-zip-mp3-file-234851-compact-guide-to-pop-music-space-travel-w7z48-vlfxwu was found to contain malicious code...

MAL-2025-25571 Malicious code in long-scale-static-report-float (npm)

The package long-scale-static-report-float was found to contain malicious code...

MAL-2025-41006 Malicious code in zip-mp3-a-lbum-do-wnload-new-30064-parable-of-arable-land-qdx68-yqscwl (npm)

The package zip-mp3-a-lbum-do-wnload-new-30064-parable-of-arable-land-qdx68-yqscwl was found to contain malicious code...

MAL-2025-32040 Malicious code in reject-stub-nu-long-delta (npm)

The package reject-stub-nu-long-delta was found to contain malicious code...

MAL-2025-28368 Malicious code in optimize-root-minify-long-grid (npm)

The package optimize-root-minify-long-grid was found to contain malicious code...

MAL-2025-25570 Malicious code in long-report-info-emulate-small (npm)

The package long-report-info-emulate-small was found to contain malicious code...

CVE-2012-10060

Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username during authentication, the server copies the input to a fixed-size stack buffer without proper bounds checking. This allows remote code...

CVE-2011-10016

Real Networks Netzip Classic version 7.5.1.86 is vulnerable to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The vulnerability is triggered when the application attempts to process a file name within the archive that exceeds the expected buffer size. Exploitation...

CVE-2012-10060

Sysax Multi Server before 5.55 is vulnerable to a stack-based buffer overflow in its SSH service when a remote attacker supplies an overly long username during authentication. The input is copied into a fixed-size stack buffer without proper bounds checking, enabling remote code execution under t...

PT-2025-33085 · Realnetworks · Netzip Classic

Name of the Vulnerable Software and Affected Versions: Real Networks Netzip Classic version 7.5.1.86 Description: Real Networks Netzip Classic version 7.5.1.86 is susceptible to a stack-based buffer overflow when parsing a specially crafted ZIP archive. The issue occurs when the application...

PT-2025-33095

Name of the Vulnerable Software and Affected Versions: Sysax Multi Server versions prior to 5.55 Description: Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker provides an overly long username during authentication, the serv...

New 'Curly COMrades' APT Using NGEN COM Hijacking in Georgia, Moldova Attacks

A previously undocumented threat actor dubbed Curly COMrades has been observed targeting entities in Georgia and Moldova as part of a cyber espionage campaign designed to facilitate long-term access to target networks. "They repeatedly tried to extract the NTDS database from domain controllers --...