Malicious code in phx-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d The package phx-core was found to contain malicious code. Source: ghsa-malware 44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d Any...

MAL-2025-192572 Malicious code in phx-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d The package phx-core was found to contain malicious code. Source: ghsa-malware 44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d Any...

CVE-2025-67906

CVE-2025-67906 affects MISP prior to 2.5.28, where the app/View/Elements/Workflows/executionPath.ctp component is vulnerable to XSS due to improper handling of user-supplied data in the workflow execution path. This could allow injected scripts to run in a user’s browser. Remediation: upgrade to ...

MISP 安全漏洞

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.5.28,...

CVE-2025-13970

OpenPLCV3 is vulnerable to a cross-site request forgery CSRF attack due to the absence of proper CSRF validation. This issue allows an unauthenticated attacker to trick a logged-in administrator into visiting a maliciously crafted link, potentially enabling unauthorized modification of PLC settin...

CVE-2025-65530

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-13970

OpenPLC_V3 (CVE-2025-13970) is reported across multiple sources to be vulnerable to a cross-site request forgery (CSRF) due to missing CSRF validation. The vulnerability allows an unauthenticated attacker to lure a logged-in administrator into visiting a malicious link, potentially enabling unaut...

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

Cybersecurity researchers are calling attention to a new campaign that's leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan RAT dubbed PyStoreRAT. "These repositories, often themed as development utilities or OSINT tools,...

EUVD-2025-203095

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-66492

Masa CMS is an open source Enterprise Content Management platform. Versions 7.2.8 and below, 7.3.1 through 7.3.13, 7.4.0-alpha.1 through 7.4.8 and 7.5.0 through 7.5.1 are vulnerable to XSS when an unsanitized value of the ajax URL query parameter is directly included within the section of the HTM...

Malicious code in gfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813943ebd3c7e53be5309757e509dc22587aab81ded149ba9b56b37e87a4dd9 The package gfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-202949

Malicious code in fruit-malicious-xml-parser npm...

Malicious code in bfruitmaliciousxmlparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff72c0a1c73026b834ec6a3b7d7cb8a31e1e07346126733651319019917d1f91 The package bfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...

CloudLinux OS 安全漏洞

CloudLinux OS is an operating system from the American company CloudLinux. A security vulnerability exists in CloudLinux OS versions prior to 32.7.4, which stems from an eval injection in malware anti-obfuscation routines that allows an attacker to overwrite arbitrary files by scanning specially...

CVE-2025-65530

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

MAL-2025-192539 Malicious code in elf-stats-twinkling-bell-867 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16e86864b736fb7b1bce367459299eab10179b9a5bf8b5740c0f6c2346974a6 The package elf-stats-twinkling-bell-867 was found to contain malicious code...

MAL-2025-192508 Malicious code in elf-stats-jolly-ornament-687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c696ff217f3b5fb230585fa3669d644df5d07b6d686687fa50639da0dbaacea7 The package elf-stats-jolly-ornament-687 was found to contain malicious code...

MAL-2025-192496 Malicious code in elf-stats-evergreen-satchel-868 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3612299385305c5a1cd65f55917676d9691d4bc50302824f775e7b676d44b599 The package elf-stats-evergreen-satchel-868 was found to contain malicious code...

MAL-2025-192503 Malicious code in elf-stats-fuzzy-workbench-102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6885087c0bc44815f87570e3ea126e735bb65b5f4cb443a1adc04915c7ac8959 The package elf-stats-fuzzy-workbench-102 was found to contain malicious code...

MAL-2025-192515 Malicious code in elf-stats-merry-hammer-791 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9024a10526d26173fff95d45767e8cf58b479418c69fa68a2264b87f8583daf The package elf-stats-merry-hammer-791 was found to contain malicious code...