EUVD-2023-26815

Malicious code in bioql PyPI...

EUVD-2022-45776

Malicious code in bioql PyPI...

Friday Squid Blogging: Jigging for Squid

A nice story...

Malicious code in season-sold-nice (npm)

The package season-sold-nice was found to contain malicious code...

Malicious code in nice-exchange-instead (npm)

The package nice-exchange-instead was found to contain malicious code...

MAL-2025-45948 Malicious code in sail-wrapped-nice (npm)

The package sail-wrapped-nice was found to contain malicious code...

MAL-2025-45312 Malicious code in nice-exchange-instead (npm)

The package nice-exchange-instead was found to contain malicious code...

Malicious code in sail-wrapped-nice (npm)

The package sail-wrapped-nice was found to contain malicious code...

MAL-2025-45981 Malicious code in season-sold-nice (npm)

The package season-sold-nice was found to contain malicious code...

LLMs in the SOC: an Empirical Study of Human-AI Collaboration in Security Operations Centres

The integration of Large Language Models LLMs into Security Operations Centres SOCs presents a transformative, yet still evolving, opportunity to reduce analyst workload through human-AI collaboration. However, their real-world application in SOCs remains underexplored. To address this gap, we...

nice-elements (>=1.1.2 <=1.13.4), olaii-web-common (>=1.0.0 <=1.0.33) potentially affected by unknown CVE via angular-truncate (=0.0.1-security)

angular-truncate NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on angular-truncate and may be impacted: - nice-elements =1.1.2, =1.0.0, =1.0.33 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14532...

Cross-site Scripting (XSS)

Overview nice-select2 is an A lightweight Vanilla JavaScript plugin that replaces native select elements with customizable dropdowns. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the element. An attacker can supply a malicious payload that is rendered directly...

CVE-2023-22686

Cross-Site Request Forgery CSRF vulnerability in TriniTronic Nice PayPal Button Lite plugin = 1.3.5 versions...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2022-42710

Nice formerly Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e devices are vulnerable to Stored Cross-Site Scripting XSS...

CVE-2022-38639

A cross-site scripting XSS vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Community Posting field...

CVE-2022-39900

Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the application installed in Secure Folder through Nice Catch...

CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on April 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-114-01 Schneider Electric Modicon Controllers ICSA-25-114-02 ALBEDO Telecom Net.Time -...

Arteche saTECH BCU 安全漏洞

The Arteche saTECH BCU is a flight room control unit from Arteche. A security vulnerability exists in Arteche saTECH BCU version 2.1.3, which originates from an attacker being able to bypass all restrictions and elevate to superuser privileges via the nice command...

WordPress BP Better Messages plugin <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links vulnerability

Unauthenticated Limited Server-Side Request Forgery in nicelinks vulnerability discovered by Tim Coen in WordPress Plugin BP Better Messages versions = 2.7.4...