CLSA-2025-1760112341 binutils: Fix of CVE-2017-9042

CVE-2017-9042: readelf.c fix a possible application crash known as the "cannot be represented in type long" issue...

Malicious code in mongodb-orn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 999e92d0085f6b2abfc2294f664172231877a42b0431f98b1aa815840bb7c1a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48311 Malicious code in webpack-css-branch-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c3abce2732c0f6e7c2ee0eac71d52075273095303405274ebc0b32dd072c82a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Your passwords don’t need so many fiddly characters, NIST says

It’s once again time to change your passwords, but if one government agency has its way, this might be the very last time you do it. After nearly four years of work to update and modernize its guidance for how companies, organizations, and businesses should protect their systems and their...

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions via the process responsible for executing system commands. An attacker can execute arbitrary commands on the server by sending crafted requests after authentication. Remediation A fix was pushed...

WordPress Next Page, Not Next Post plugin <= 0.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Next Page, Not Next Post versions = 0.3.0...

MAL-2025-48284 Malicious code in melichat-chat-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c2d41e4c7fa96605141a046fcb172ffe601946ad931be7b5e96e935803c75f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-42701

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Term Visibility...

Yubico YubiKey Manager < 1.2.6 Privilege Escalation

The version of Yubico YubiKey Manager installed on the remote host is prior to 1.2.6. It is, therefore, affected by a vulnerability. Yubico ykman-gui aka YubiKey Manager GUI before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windows can open as...

Malicious Package

Overview mad-1.4.0.2.2.8 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in mad-3.0.1.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22a95aaaa7fd9efb994a7a1fc912db0181f2efa04105dd37a1a368bab0cff576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48262 Malicious code in mad-5.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e95f4e16bcfc6e45425aaca89a6cd7eef9fe693c5ffc0b34270497980e9dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33583

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...

EUVD-2025-33581

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue...

MAL-2025-48226 Malicious code in redirect-vlgk2c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18734d591d60ae3710a881e043a5ff1706db08ea32339fa268acf9ca38baa372 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48221 Malicious code in redirect-u0e2q7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8b0dd60c89b0c84968f34108c06d0e58951c2c9a1b03a2b826c6261e7da224f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-mop8sg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a79e526d8be12fc63ff78dfdf34e9ccd31a3d1b246d4e671bf6223814d3c7d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48228 Malicious code in redirect-whb6rt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd0987c4c2d53a1a9a65785c5954913491bde650e384e279698367c4c8261ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48184 Malicious code in redirect-ld0k2a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f762105594d45064c5f4884413c3276f3290f34020261668e50bae1efafcff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4615 PAN-OS: Improper Neutralization of Input in the Management Web Interface

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...