Malicious code in npm-message (npm)

The package npm-message was found to contain malicious code...

MAL-2025-31827 Malicious code in react-native-react-native-show-message-extension (npm)

The package react-native-react-native-show-message-extension was found to contain malicious code...

Malicious code in pre-commit-message-test (npm)

The package pre-commit-message-test was found to contain malicious code...

Malicious code in mqtt_plugin (npm)

The package mqttplugin was found to contain malicious code...

MAL-2025-27837 Malicious code in npm-message (npm)

The package npm-message was found to contain malicious code...

MAL-2025-29604 Malicious code in pre-commit-message-test (npm)

The package pre-commit-message-test was found to contain malicious code...

Malicious code in react-native-react-native-show-message-extension (npm)

The package react-native-react-native-show-message-extension was found to contain malicious code...

CVE-2025-50177

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

CVE-2025-50169

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB allows an unauthorized attacker to execute code over a network...

CVE-2025-53145

Access of resource using incompatible type 'type confusion' in Windows Message Queuing allows an authorized attacker to execute code over a network...

CVE-2025-53143

Access of resource using incompatible type 'type confusion' in Windows Message Queuing allows an authorized attacker to execute code over a network...

CVE-2025-53144

Access of resource using incompatible type 'type confusion' in Windows Message Queuing allows an authorized attacker to execute code over a network...

KuWFi CPF908-CP5 安全漏洞

KuWFi CPF908-CP5 is a WiFi router from KuWFi China. A security vulnerability exists in the KuWFi CPF908-CP5 WEB5.0LCD20210125 version, which stems from an unauthenticated access control vulnerability that could lead to the disclosure of sensitive information, modification of device settings, and...

EulerOS 2.0 SP11 : iputils (EulerOS-SA-2025-1930)

According to the versions of the iputils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ping in iputils through 20240905 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo Reply packet,...

SMB Fetch

Fetch and execute an x64 payload from an SMB server. Module Options msf use payload/cmd/windows/smb/x64/downloadexec msf payloaddownloadexec show actions ...actions... msf payloaddownloadexec set ACTION msf payloaddownloadexec show options ...show and set options... msf payloaddownloadexec run Th...

Denial Of Service (DoS)

ruby-saml is vulnerable to Denial Of Service DoS. The vulnerability is due to improper order of validation checks due to the SAML response being validated for Base64 format before checking the configured message size, allowing potential resource exhaustion...

USN-7685-5: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; - SMB network file syste...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f...

krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This ma...

EulerOS 2.0 SP11 : ruby (EulerOS-SA-2025-1967)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is...