342 matches found
MAL-2025-48928 Malicious code in fzreo-trading-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88d8fd4cc0828b828f3a6fe64daf9b8dc84c84729972d2c17de5559ab96c653 The package fzreo-trading-sdk was found to contain malicious code. Source: ghsa-malware...
Malicious code in energy-portal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4830ca4abd86f26380368ac28f819b1c5a209bb67804a59ac916cab4f96099f6 The package energy-portal was found to contain malicious code. Source: ghsa-malware de4d4f73709d8cd24cf252de30a2c865264a7a804813494674c2a6cb15337c8e...
MAL-2025-48778 Malicious code in tailwind-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9212e51117e449a9e60cece9254daaa17a757088742195bf3c4396a0c5a8283 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-42910
Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...
Debian dla-4331 : webext-https-everywhere - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4331 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4331-1 [email protected] https://www.debian.org/lts/security/...
Malicious code in batchw-test-common-config (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5e9b5b07a6f6f901ab96aa3b48d3b80dc1c0928d03c4cd4018422a15ced54b Any computer that has this package installed or running should be considered...
[SECURITY] [DLA 4331-1] https-everywhere security update
Debian LTS Advisory DLA-4331-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 14, 2025 https://wiki.debian.org/LTS Package : https-everywhere Version : 2025.10.14-0+deb11u1 Debian Bug : 1118030 1118045 The Firefox extension HTTPS Everywhere used to enforc...
MAL-2025-48403 Malicious code in akasearch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1075d10450cfce61ccff3b97a9b8bf18a7be1d286b307dbff6e0018768baa4da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-42910
Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...
CVE-2025-42910 Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management
Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...
EUVD-2025-34120
Due to missing verification of file type or content, SAP Supplier Relationship Management allows an authenticated attacker to upload arbitrary files. These files could include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an...
PT-2025-41842
Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management affected versions not specified Description SAP Supplier Relationship Management does not properly verify the type or content of uploaded files. This allows an authenticated attacker to upload arbitrary...
Malicious code in scr-web-production (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e603ee12cd5c70284024a104eb59fc914d86f04ad666bdf442253c0dd171ad4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mad-3.2.1.2.2.8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f05a2f1326264237af5cd953fed9ffdbd2c6fbff24177c05893153feceedb7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48246 Malicious code in mad-1.2.9.2.2.8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9ee7df3c05d745488aab56d8e7e24dcc135b735d5f8b1f7a620b635e2d1514e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48129 Malicious code in redirect-63cl4f (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2812550ae381a965b1d3d0268c751c60bc5208a0bffd135bdef63456849476e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48069 Malicious code in redirect-prhts6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b32276d7067817b78f366ea8008f4de08e67019bec5e9362851a8940fd8d7c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nokogiri (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52d84f0c9be95071bb514b725ec5c700efe36d5b4ebed67b5e36c3f2cbf6d40e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...