MAL-2025-23216 Malicious code in info-air-monitor-deserialize-bad (npm)

The package info-air-monitor-deserialize-bad was found to contain malicious code...

MAL-2025-26651 Malicious code in monitor-rho-pipe-log-zeta (npm)

The package monitor-rho-pipe-log-zeta was found to contain malicious code...

MAL-2025-18305 Malicious code in deserialize-object-bash-monitor-short (npm)

The package deserialize-object-bash-monitor-short was found to contain malicious code...

MAL-2025-40563 Malicious code in ynodejs_mod_monitor (npm)

The package ynodejsmodmonitor was found to contain malicious code...

MAL-2025-36804 Malicious code in theta-iota-simple-java-monitor (npm)

The package theta-iota-simple-java-monitor was found to contain malicious code...

MAL-2025-26652 Malicious code in monitor-website (npm)

The package monitor-website was found to contain malicious code...

MAL-2025-40954 Malicious code in zero-simulate-rain-monitor-book (npm)

The package zero-simulate-rain-monitor-book was found to contain malicious code...

Malicious code in multi-monitor-updater (npm)

The package multi-monitor-updater was found to contain malicious code...

MAL-2025-26879 Malicious code in multi-monitor-updater (npm)

The package multi-monitor-updater was found to contain malicious code...

MAL-2025-26650 Malicious code in monitor-paypal (npm)

The package monitor-paypal was found to contain malicious code...

Connex Credit Union Data Breach Affects 172,000 Members

Connex Credit Union breach exposes data of 172000 members, legal probe launched, experts urge victims to monitor accounts…...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the CheckOrigin function in the api/terminal.go file. An attacker can execute arbitrary commands on the target system by tricking an authenticated user into visiting a malicious web page that...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the CheckOrigin function in the api/terminal.go file. An attacker can execute arbitrary commands on the target system by tricking an authenticated user into visiting a malicious web page that...

Linux Distros Unpatched Vulnerability : CVE-2024-21212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0...

Linux Distros Unpatched Vulnerability : CVE-2023-52863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: hwmon: axi-fan- control Fix possible NULL pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2024-58096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: add srng-lock for ath11khalsrng in monitor mode ath11khalsrng should be used with srng-lock to protect srng data. For ath11kdprxmondestprocess and...

Linux Distros Unpatched Vulnerability : CVE-2022-49945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: gpio-fan Fix array out of bounds access The driver does not check if the cooling state passed to gpiofansetcurstate exceeds the maximum cooling state as...

Linux Distros Unpatched Vulnerability : CVE-2024-43852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc2991 re-order conditions to fix off by one bug LTC2991TINTCHNR is 4. The st-tempen...

Linux Distros Unpatched Vulnerability : CVE-2025-21909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: nl80211: reject cooked mode if it is set along with other flags It is possible to set both MONITORFLAGCOOKFRAMES and MONITORFLAGACTIVE flags simultaneousl...

CVE-2025-52586

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...