Malicious code in new-route-matrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ee2159cd9cc77ad5a88ac059f6c816cf1b9b4ec1e8148c4bb75cd1bf5a5244 The package new-route-matrix was found to contain malicious code. Source: ghsa-malware 8be55d07fc4dd84c7c769d8ec2f62de2eb9fea7a60664d2eac8fd91f757a1e...

EUVD-2023-60053

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting XSS vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affecte...

CVE-2025-40100 btrfs: do not assert we found block group item when creating free space tree

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when building a free space tree at populatefreespacetree, if we are not using the block group tree feature, we always expect to find block...

CVE-2025-34302 IPFire < v2.29 Stored XSS via Service Creation

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the PROT parameter when creating a new service. When a user adds a service, the application issues an HTTP POST...

SideWinder Adopts New ClickOnce-Based Attack Chain Targeting South Asian Diplomats

A European embassy located in the Indian capital of New Delhi, as well as multiple organizations in Sri Lanka, Pakistan, and Bangladesh, have emerged as the target of a new campaign orchestrated by a threat actor known as SideWinder in September 2025. The activity "reveals a notable evolution in...

Fedora: Security Advisory (FEDORA-2025-36b24b67b3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in new-cod-mobile-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef6e06bec3c2593911ecfae523f2324500500664b97da7bf34487325352a09c The package new-cod-mobile-h-ack-working-2023-march was found to contain malicious code...

Malicious code in new-tiktok-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3257e6436c4ec191b344e85593e5bea0a9e5b8669151176a87eee554c53ca86 The package new-tiktok-h-ack-working-2023-march was found to contain malicious code...

Malicious code in new-fifa-mobile-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30030a18d067ae234effc394f8cc8ca10823fbd78beed5b2fee67caf3549ff7a The package new-fifa-mobile-h-ack-working-2023-march was found to contain malicious code...

MAL-2025-48942 Malicious code in new-pubg-mobile-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4912df0c391b76679bbc455c05663219019fffc89baf9a7d45f14c5e9e8b0cde The package new-pubg-mobile-h-ack-working-2023-march was found to contain malicious code...

MAL-2025-48940 Malicious code in new-cod-mobile-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef6e06bec3c2593911ecfae523f2324500500664b97da7bf34487325352a09c The package new-cod-mobile-h-ack-working-2023-march was found to contain malicious code...

Malicious code in new-pubg-mobile-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4912df0c391b76679bbc455c05663219019fffc89baf9a7d45f14c5e9e8b0cde The package new-pubg-mobile-h-ack-working-2023-march was found to contain malicious code...

Malicious code in new-wwe-immortals-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1f01bcf57c61890970d89a1b64684f4470980a293dcb6aedbce8bf51e198d The package new-wwe-immortals-h-ack-working-2023-march was found to contain malicious code...

MAL-2025-48944 Malicious code in new-wwe-immortals-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1f01bcf57c61890970d89a1b64684f4470980a293dcb6aedbce8bf51e198d The package new-wwe-immortals-h-ack-working-2023-march was found to contain malicious code...

MAL-2025-48941 Malicious code in new-fifa-mobile-h-ack-working-2023-march (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30030a18d067ae234effc394f8cc8ca10823fbd78beed5b2fee67caf3549ff7a The package new-fifa-mobile-h-ack-working-2023-march was found to contain malicious code...

Friday Squid Blogging: “El Pulpo The Squid”

There is a new cigar named "El Pulpo The Squid." Yes, that means "The Octopus The Squid." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

Fedora 41 : wireshark (2025-54df0e65ea)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-54df0e65ea advisory. New version 4.6.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CVE-2025-62661 Do permission checking when getting counts of global and local edits, new articles and thanks

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension:...

CVE-2025-62661 Do permission checking when getting counts of global and local edits, new articles and thanks

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension:...

CVE-2025-62661

The CVE-2025-62661 issue targets Wikimedia Foundation MediaWiki extensions (Thanks Extension and Growth Experiments Extension). The root cause is incorrect default permissions that allow access to functionality not properly constrained by ACLs. Affected products include the Thanks Extension and G...