CVE-2025-11570

Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...

CVE-2025-11570

Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...

Malicious code in @evo-tech/backoffice-test-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931d6e176eaebf4b172dba6fd81800d7257f741ffad464c014dc9fcd085bcba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-41502

Name of the Vulnerable Software and Affected Versions drupal-pattern-lab/unified-twig-extensions versions 0.0.0 through 1.1.0 Description The package contains a Cross-site Scripting XSS issue because of inadequate data filtering. This is only exploitable when the code runs outside of Drupal, as t...

MAL-2025-48266 Malicious code in react-copack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57401915f2c34bc9f6acd6172ce514016093a6857148c0d46ef0bad52792c357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.4.0.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8146c0e8e6a0aa9d6e7f8a6375cdbe84b7980976f86b1055aed3e84a19dcace7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48253 Malicious code in mad-2.0.1.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f7b7f7c3402d257f9f14e953189f25bcb44722a79c99b2d68449796a3896d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.0.2.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a417a96fb1a489ed21a97883097356cc05d7f014eee21d941bc0cf6a4541c036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48222 Malicious code in redirect-ubp4cs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b184e6cfeb122b4bd7211f4d39a3b49f6900d58423cb5824a863fc2cf9b514c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-o92d2h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77f3c6a2ba50a265c6c612f8d9982534cea0e6b9441dec88bd1a7f428adfa8af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-63cl4f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2812550ae381a965b1d3d0268c751c60bc5208a0bffd135bdef63456849476e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48159 Malicious code in redirect-fd91u6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3cdfdea3a7366fe091b0b276a32e9cfcbf518b624842338e9d5befc6c1fb843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48145 Malicious code in redirect-cn040w (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25a017e32cbceb0365c659a0fc3f0649a71d0b52774c3d8002bcc808baa4d086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-eeu53f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb93c87377f42581a57a298338e41779e5304e75b3e6418d51a15341a6f55c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-sormfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5077214a1a7b6d8085d3e85f9e33151aa5ec8c2525c22648b00fa637e46bde67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-noyuan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfefab6bff187a106098b7be9862bc879253570f8cd1b97288bd2f4cadbdd08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-39664 Path-Traversal in report scheduler

Insufficient escaping in the report scheduler within Checkmk 2.4.0p13, 2.3.0p38, 2.2.0p46 and 2.1.0 EOL allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory...

PT-2025-41389

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.4.0p13 Checkmk versions prior to 2.3.0p38 Checkmk versions prior to 2.2.0p46 Checkmk version 2.1.0 Description A flaw exists in the report scheduler of Checkmk that allows authenticated attackers to define the stora...

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability in Checkmk versions prior to 2.4.0p13, prior to 2.3.0p38, prior to 2.2.0p46, and version 2.1.0, which stems from insufficient escaping in the report scheduler, could allow an attacker to define the storage location o...

Malicious code in redirect-297vpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9517560a65a1c1bbd91a87b0d971d3e19dfd28ae7a73c8e9dbdd842907d362e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...