react-cve-2025-55182

react-cve-2025-55182 This is a dump of malware and other suspicious junk I found on the server for my wedding website following the react server side rendering code execution exploit. Its a dinky digital ocean droplet running a fairly pedestrian next js app. The CVE:...

Malware in tailwindcss-uniform

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in tailwindcss-form

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

maltrieve

Stories in Ready Stories in In Progress | | | || | | |/ | | \ / | | | | | | | | | \ | | / | Maltrieve Maltrieve originated as a fork of mwcrawler. It retrieves malware directly from the sources as listed at a number of sites. Currently we crawl the following: Malc0de Malware Domain List Malware...

Cisco Secure Email Gateway Advanced Malware Protection Privilege Escalation

The vulnerability of the Advanced Malware Protection module of the Cisco Secure Email Gateway protection tool is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain write access to arbitrary files and execute...

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway, specifically in the Advanced Malware Protection feature. The vulnerability lies in the way the Advanced Malware Protection feature processes email attachments when the file reputation service is enabled. An unauthenticated extern...

Malware in @xxxfnbs21/hello-demo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @xxxfnbs21/hello-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca1e29da88b95415d443f6911d2facdbabec1a0cd7b756594ffdf4336e1442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-76519

Cisco Secure Email Gateway is vulnerable to a relative path traversal flaw in its Advanced Malware Protection (AMP) feature. When the file reputation service is enabled, an unauthenticated remote attacker can send an email with a crafted attachment to write arbitrary files on the underlying opera...

CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

EUVD-2026-101420

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

PT-2026-113737

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions prior to 15.5.5-014 Cisco Secure Email Gateway version 16.0 Cisco Secure Email Gateway versions prior to 16.5.0-780 Description A relative path traversal issue exists in the Advanced Malware Protection AMP...

CVE-2026-14308

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService...

CVE-2026-14308

Zohocorp ManageEngine Malware Protection Plus versions prior to 1.0.64.12 are susceptible to a vulnerability caused by insufficient driver signature validation within the MEARWService component. This flaw may allow for unauthorized driver execution. The impact is categorized as having high availa...

CVE-2026-14308 Insufficient Signature Validation

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService...

CVE-2026-14308: Improper Input Validation

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService...

PT-2026-111305

Name of the Vulnerable Software and Affected Versions ManageEngine Malware Protection Plus versions prior to 1.0.64.12 Description Insufficient driver signature validation occurs within the MEARWService component. This issue allows for the potential loading of unsigned or improperly signed driver...

Malware in @coopeuch/components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @coopeuch/config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @coopeuch/common

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...