MAL-2025-45354 Malicious code in nohack-erlinglingqi-part4 (npm)

The package nohack-erlinglingqi-part4 was found to contain malicious code...

MAL-2025-45348 Malicious code in nohack-erlinglingliu-part1 (npm)

The package nohack-erlinglingliu-part1 was found to contain malicious code...

MAL-2025-43732 Malicious code in cfan-erlinglingqi-part4 (npm)

The package cfan-erlinglingqi-part4 was found to contain malicious code...

MAL-2025-45345 Malicious code in nohack-erlinglingjiu-part2 (npm)

The package nohack-erlinglingjiu-part2 was found to contain malicious code...

MAL-2025-44565 Malicious code in heix-erlinglingliu-part1 (npm)

The package heix-erlinglingliu-part1 was found to contain malicious code...

MAL-2025-44580 Malicious code in heix-erlinglingwu-part4 (npm)

The package heix-erlinglingwu-part4 was found to contain malicious code...

MAL-2025-43725 Malicious code in cfan-erlinglingliu-part1 (npm)

The package cfan-erlinglingliu-part1 was found to contain malicious code...

MAL-2025-44577 Malicious code in heix-erlinglingwu-part1 (npm)

The package heix-erlinglingwu-part1 was found to contain malicious code...

MAL-2025-43736 Malicious code in cfan-erlingyier-part4 (npm)

The package cfan-erlingyier-part4 was found to contain malicious code...

MAL-2025-43743 Malicious code in cfan-erlingyisi-part4 (npm)

The package cfan-erlingyisi-part4 was found to contain malicious code...

MAL-2025-43747 Malicious code in cfan-erlingyiwu-part4 (npm)

The package cfan-erlingyiwu-part4 was found to contain malicious code...

MAL-2025-43739 Malicious code in cfan-erlingyisan-part4 (npm)

The package cfan-erlingyisan-part4 was found to contain malicious code...

MAL-2025-43735 Malicious code in cfan-erlingyier-part3 (npm)

The package cfan-erlingyier-part3 was found to contain malicious code...

MAL-2025-44571 Malicious code in heix-erlinglingqi-part3 (npm)

The package heix-erlinglingqi-part3 was found to contain malicious code...

MAL-2025-44566 Malicious code in heix-erlinglingliu-part2 (npm)

The package heix-erlinglingliu-part2 was found to contain malicious code...

org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability

A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters limited local part of the email, so the attack is limited to very shorts emails subject...

org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability

A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters limited local part of the email, so the attack is limited to very shorts emails subject...

ipvlan: ensure network headers are in skb linear part

...

Referral Beware, Your Rewards are Mine (Part 1)

The post Referral Beware, Your Rewards are Mine Part 1 appeared first on Rhino Security Labs...

CVE-2025-9506

CVE-2025-9506 affects Campcodes Online Loan Management System v1.0. The vulnerability is an SQL injection in the file /ajax.php?action=delete_plan caused by improper handling/manipulation of the ID parameter. It is exploitable remotely, with exploitation publicly disclosed. Connected sources corr...