INE Security Alert: Expediting CMMC 2.0 Compliance

Cary, North Carolina, 26th January 2025, CyberNewsWire...

Brave Software: Null Pointer Dereference by Crafted Response from AI Model

The Brave browser was affected by a null pointer dereference vulnerability caused by a crafted response from an AI model. The vulnerability was triggered when the user set a malicious endpoint as the AI model's server endpoint. The code handling the server response assumed a specific structure...

CVE-2025-0708

A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross site scripting. The attack can be...

CVE-2025-0708 fumiao opencms Add Model Management Page addOrUpdate cross site scripting

A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross site scripting. The attack can be...

CVE-2025-24578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ElementInvader ElementInvader Addons for Elementor allows DOM-Based XSS. This issue affects ElementInvader Addons for Elementor: from n/a through 1.3.0...

Malicious code in meli-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e9c43699ec25184387ef69493ea9408036e114da2e1501a93d9cc74e38df909a The OpenSSF Package Analysis project identified 'meli-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-558 Malicious code in meli-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e9c43699ec25184387ef69493ea9408036e114da2e1501a93d9cc74e38df909a The OpenSSF Package Analysis project identified 'meli-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b29ef5b7f91f403e3af36ebf885175b0589e5142149b466eae7e650ed71239 The OpenSSF Package Analysis project identified 'lyft-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-535 Malicious code in lyft-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b29ef5b7f91f403e3af36ebf885175b0589e5142149b466eae7e650ed71239 The OpenSSF Package Analysis project identified 'lyft-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-502 Malicious code in instacart-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0f156bd66bab53f207eefced759f8bacbfeaa07433a39282c23b0d3b9f816af The OpenSSF Package Analysis project identified 'instacart-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af949cfb5a5349e6685c85de7c1f23beb51e56c772e2c6f19ec5f00e0a87e407 The OpenSSF Package Analysis project identified 'godaddy-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0255f17a95ebab8a2dad34723e65be392d1d7bccd4bc5128ee0450c7ab67639 The OpenSSF Package Analysis project identified 'epicagames-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-448 Malicious code in epicagames-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0255f17a95ebab8a2dad34723e65be392d1d7bccd4bc5128ee0450c7ab67639 The OpenSSF Package Analysis project identified 'epicagames-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-401 Malicious code in bookingcom-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5c9dcb72053012a554271c8641e9b1e41f0457ce148e0b01794de89c9752b5d5 The OpenSSF Package Analysis project identified 'bookingcom-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5c9dcb72053012a554271c8641e9b1e41f0457ce148e0b01794de89c9752b5d5 The OpenSSF Package Analysis project identified 'bookingcom-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-430 Malicious code in dropbox-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecb4588479d4814adaeee8f5670d6fcdb9fa38e06a48ed99dd6ace3553a4ac24 The OpenSSF Package Analysis project identified 'dropbox-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecb4588479d4814adaeee8f5670d6fcdb9fa38e06a48ed99dd6ace3553a4ac24 The OpenSSF Package Analysis project identified 'dropbox-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-383 Malicious code in amazon-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca95e83b37fb0ea358d6155d8158d873558f75026d3e1b8304456522fafc7755 The OpenSSF Package Analysis project identified 'amazon-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca95e83b37fb0ea358d6155d8158d873558f75026d3e1b8304456522fafc7755 The OpenSSF Package Analysis project identified 'amazon-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

PT-2025-4017 · Unknown · Fumiao Opencms

Name of the Vulnerable Software and Affected Versions: fumiao opencms version 2.2 Description: A vulnerability was found in the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross-site scripting. The attack can be initiate...