MAL-2025-6812 Malicious code in eslint-plugin-react_editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 091ef657bc115b400dc3d8cd65691df53caef85fa307f52d627aac4d50120a77 The OpenSSF Package Analysis project identified 'eslint-plugin-reacteditor' @ 71.71.72 npm as malicious. It is considered malicious because: - T...

Code-Projects Simple Art Gallery 注入漏洞

Code-Projects Simple Art Gallery is a Code-Projects open source simple art gallery software. An injection vulnerability exists in Code-Projects Simple Art Gallery version 1.0, which originates from a SQL injection due to a misuse of the parameter fname in the file /Admin/registration.php, which...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability, which can be exploited by an attacker to cause a denial of service via the function esmhandlepdnconnectivityrequest...

Civil Servants As Builders: Enabling Non-IT Staff to Develop Secure Python and R Tools

Current digital government literature focuses on professional in-house IT teams, specialized digital service teams, vendor-developed systems, or proprietary low-code/no-code tools. Almost no scholarship addresses a growing middle ground: technically skilled civil servants outside formal IT roles...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited by an attacker to deny service...

Pocsuite

This project is an open-sourced remote vulnerability testing and proof-of-concept development framework called Pocsuite, developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine and many niche features for penetration testers and security researchers. The framework...

A Special Diamond Is the Key to a Fully Open Source Quantum Sensor

Quantum sensors can be used in medical technologies, navigation systems, and more, but they’re too expensive for most people. That's where the Uncut Gem open source project comes in...

MAL-2025-6810 Malicious code in badger-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 102e103c2148dd46b3b7b80cbf9641deea29213407e46ee74af433da247bd9ef The OpenSSF Package Analysis project identified 'badger-doc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6813 Malicious code in hcs-image-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 28a35db26dad04831df161435cbbf5343e242f3ebc2fe7764b3feadd1926646c The OpenSSF Package Analysis project identified 'hcs-image-viewer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @sangith/newrelic (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df1e3a9bd21e4d7ca6ae9595850002d67806ca9fd408d068bad6ce3a8a4c2dbf The OpenSSF Package Analysis project identified '@sangith/newrelic' @...

CyberArk and HashiCorp Flaws Enable Remote Vault Takeover Without Credentials

Cybersecurity researchers have discovered over a dozen vulnerabilities in enterprise secure vaults from CyberArk and HashiCorp that, if successfully exploited, can allow remote attackers to crack open corporate identity systems and extract enterprise secrets and tokens from them. The 14...

[SECURITY] Fedora 42 Update: chromium-139.0.7258.66-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

OpenBao 安全漏洞

OpenBao is OpenBao open source a sensitive data management software . OpenBao has a security vulnerability that can be exploited by attackers to cause a brute-force crack...

OpenBao 安全漏洞

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which can be exploited by attackers to cause information leakage...

Who'S the Evil Twin? Differential Auditing for Undesired Behavior

Detecting hidden behaviors in neural networks poses a significant challenge due to minimal prior knowledge and potential adversarial obfuscation. We explore this problem by framing detection as an adversarial game between two teams: the red team trains two similar models, one trained solely on...

Assemblyline 4 Service Client 安全漏洞

Assemblyline 4 Service Client is a Canadian Centre for Cyber Security open source service client for publishing service results in Assemblyline 4. A security vulnerability exists in Assemblyline 4 Service Client versions prior to 4.6.1.dev138, which stems from the direct use of SHA-256 values...

OpenBao 安全漏洞

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions, which can be exploited by attackers to cause MFA requirements to be bypassed...

OpenBao 安全漏洞

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause elevation of privilege...

CVE-2025-55188

creationtimestamp| type| source ---|---|--- 2025-08-08 23:51:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvwgzkd4xl2d 2025-08-09 20:16:03+00:00| seen| https://seclists.org/oss-sec/2025/q3/82 2025-08-09 22:51:21+00:00| seen|...

CVE-2025-55014

creationtimestamp| type| source ---|---|--- 2025-08-08 10:24:28+00:00| seen| https://seclists.org/oss-sec/2025/q3/81 2025-08-13 03:49:46+00:00| seen| https://bsky.app/profile/thecascading.bsky.social/post/3lwawa53r2h2d...