Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to using os.MkdirAll function which does not perform any permission checks when a given directory path already exists. An attacker can gain unauthorized access or modify files by...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Fedora 41 : maturin (2025-d0fde656f0)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d0fde656f0 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security...

Linux Distros Unpatched Vulnerability : CVE-2020-7739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an SS...

CVE-2025-59046 interactive-git-checkout has Command Injection vulnerability

The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and...

Malicious code in qimen-dunjia-yindunpian (npm)

The package qimen-dunjia-yindunpian was found to contain malicious code...

Malicious code in @zalastax/nolb-_hv (npm)

The package @zalastax/nolb-hv was found to contain malicious code...

MAL-2025-43636 Malicious code in blossom_svvqv_st5gi_fireworks (npm)

The package blossomsvvqvst5gifireworks was found to contain malicious code...

Malicious code in cli-public-proxima-oberon (npm)

The package cli-public-proxima-oberon was found to contain malicious code...

MAL-2025-42573 Malicious code in @hishpr/voluptatem-et-vitae (npm)

The package @hishpr/voluptatem-et-vitae was found to contain malicious code...

MAL-2025-43161 Malicious code in @zalastax/nolb-checkn (npm)

The package @zalastax/nolb-checkn was found to contain malicious code...

MAL-2025-42753 Malicious code in @teamteanpm2024/debitis-molestias-accusantium (npm)

The package @teamteanpm2024/debitis-molestias-accusantium was found to contain malicious code...

MAL-2025-45943 Malicious code in sagitta-gemini-nashira-thuban (npm)

The package sagitta-gemini-nashira-thuban was found to contain malicious code...

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

...

Linux Distros Unpatched Vulnerability : CVE-2021-23648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function. CVE-2021-23648...

Malicious code in retool-security-install-qa (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2021-33930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function poolinstallablewhatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...

Fedora: Security Advisory (FEDORA-2025-41a6e9b04d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...