MAL-2025-6810 Malicious code in badger-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 102e103c2148dd46b3b7b80cbf9641deea29213407e46ee74af433da247bd9ef The OpenSSF Package Analysis project identified 'badger-doc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6813 Malicious code in hcs-image-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 28a35db26dad04831df161435cbbf5343e242f3ebc2fe7764b3feadd1926646c The OpenSSF Package Analysis project identified 'hcs-image-viewer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @sangith/newrelic (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df1e3a9bd21e4d7ca6ae9595850002d67806ca9fd408d068bad6ce3a8a4c2dbf The OpenSSF Package Analysis project identified '@sangith/newrelic' @...

CyberArk and HashiCorp Flaws Enable Remote Vault Takeover Without Credentials

Cybersecurity researchers have discovered over a dozen vulnerabilities in enterprise secure vaults from CyberArk and HashiCorp that, if successfully exploited, can allow remote attackers to crack open corporate identity systems and extract enterprise secrets and tokens from them. The 14...

CyberArk and HashiCorp Flaws Enable Remote Vault Takeover Without Credentials

Cybersecurity researchers have discovered over a dozen vulnerabilities in enterprise secure vaults from CyberArk and HashiCorp that, if successfully exploited, can allow remote attackers to crack open corporate identity systems and extract enterprise secrets and tokens from them. The 14...

[SECURITY] Fedora 42 Update: chromium-139.0.7258.66-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

Who'S the Evil Twin? Differential Auditing for Undesired Behavior

Detecting hidden behaviors in neural networks poses a significant challenge due to minimal prior knowledge and potential adversarial obfuscation. We explore this problem by framing detection as an adversarial game between two teams: the red team trains two similar models, one trained solely on...

OpenBao security vulnerabilities

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao versions 0.1.0 through 2.3.1, which can be exploited by attackers to cause information leakage...

OpenBao security vulnerabilities

OpenBao is OpenBao open source a sensitive data management software . OpenBao has a security vulnerability that can be exploited by attackers to cause a brute-force crack...

OpenBao security vulnerabilities

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions, which can be exploited by attackers to cause MFA requirements to be bypassed...

OpenBao security vulnerabilities

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause elevation of privilege...

Assemblyline 4 Service Client Security Vulnerability

Assemblyline 4 Service Client is a Canadian Centre for Cyber Security open source service client for publishing service results in Assemblyline 4. A security vulnerability exists in Assemblyline 4 Service Client versions prior to 4.6.1.dev138, which stems from the direct use of SHA-256 values...

CVE-2025-55188

creationtimestamp| type| source ---|---|--- 2025-08-08 23:51:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvwgzkd4xl2d 2025-08-09 20:16:03+00:00| seen| https://seclists.org/oss-sec/2025/q3/82 2025-08-09 22:51:21+00:00| seen|...

CVE-2025-55014

creationtimestamp| type| source ---|---|--- 2025-08-08 10:24:28+00:00| seen| https://seclists.org/oss-sec/2025/q3/81 2025-08-13 03:49:46+00:00| seen| https://bsky.app/profile/thecascading.bsky.social/post/3lwawa53r2h2d...

[SECURITY] Fedora 41 Update: firefox-141.0.2-1.fc41

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 41 Update: moby-engine-28.3.3-1.fc41

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...

1Panel Command Injection Vulnerability

1Panel is an open source Linux server operation and maintenance management panel of the Chinese 1Panel community . 1Panel suffers from a command injection vulnerability that stems from incomplete certificate validation, which can be exploited by an attacker to cause remote code execution...

CVE-2025-54787

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. There is a vulnerability in SuiteCRM version 7.14.6 which allows unauthenticated downloads of any file from the upload-directory, as long as it is named by an ID e.g. attachments. An...

The AI-Powered Security Shift: What 2025 Is Teaching Us About Cloud Defense

Now that we are well into 2025, cloud attacks are evolving faster than ever and artificial intelligence AI is both a weapon and a shield. As AI rapidly changes how enterprises innovate, security teams are now tasked with a triple burden: 1. Secure AI embedded in every part of the business. 2. Use...

Malicious code in sendbird-notifications-extension-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db0ee25cfff1ec99d94cc0e5866df17eda725c53a92c98ce3057df8f5f23c9cc The OpenSSF Package Analysis project identified 'sendbird-notifications-extension-example' @ 1019.0.1 npm as malicious. It is considered malicio...