Malicious code in heix-erlinglingqi-part2 (npm)

The package heix-erlinglingqi-part2 was found to contain malicious code...

MAL-2025-43743 Malicious code in cfan-erlingyisi-part4 (npm)

The package cfan-erlingyisi-part4 was found to contain malicious code...

MAL-2025-44565 Malicious code in heix-erlinglingliu-part1 (npm)

The package heix-erlinglingliu-part1 was found to contain malicious code...

MAL-2025-44571 Malicious code in heix-erlinglingqi-part3 (npm)

The package heix-erlinglingqi-part3 was found to contain malicious code...

MAL-2025-43727 Malicious code in cfan-erlinglingliu-part3 (npm)

The package cfan-erlinglingliu-part3 was found to contain malicious code...

MAL-2025-45348 Malicious code in nohack-erlinglingliu-part1 (npm)

The package nohack-erlinglingliu-part1 was found to contain malicious code...

MAL-2025-45354 Malicious code in nohack-erlinglingqi-part4 (npm)

The package nohack-erlinglingqi-part4 was found to contain malicious code...

MAL-2025-44572 Malicious code in heix-erlinglingqi-part4 (npm)

The package heix-erlinglingqi-part4 was found to contain malicious code...

MAL-2025-43732 Malicious code in cfan-erlinglingqi-part4 (npm)

The package cfan-erlinglingqi-part4 was found to contain malicious code...

MAL-2025-43747 Malicious code in cfan-erlingyiwu-part4 (npm)

The package cfan-erlingyiwu-part4 was found to contain malicious code...

org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability

A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters limited local part of the email, so the attack is limited to very shorts emails subject...

org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability

A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters limited local part of the email, so the attack is limited to very shorts emails subject...

ipvlan: ensure network headers are in skb linear part

...

Referral Beware, Your Rewards are Mine (Part 1)

The post Referral Beware, Your Rewards are Mine Part 1 appeared first on Rhino Security Labs...

CVE-2025-9506

CVE-2025-9506 affects Campcodes Online Loan Management System v1.0. The vulnerability is an SQL injection in the file /ajax.php?action=delete_plan caused by improper handling/manipulation of the ID parameter. It is exploitable remotely, with exploitation publicly disclosed. Connected sources corr...

CVE-2025-9381

A security flaw has been discovered in FNKvision Y215 CCTV Camera 10.194.120.40. This affects an unknown part of the file /tmp/wpasupplicant.conf. Performing manipulation results in information disclosure. The attack may be carried out on the physical device. The attack's complexity is rated as...

CGA-WR42-6RJM-6Q3J

Bulletin has no description...

CVE-2025-9143

A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailinglists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public a...

ALSA-2025:14177 Important: tomcat security update

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat DoS in multipart upload CVE-2025-48988 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources CVE-2025-49125 apache-commons-fileupload: Apache...

CVE-2025-9143 Scada-LTS mailing_lists.shtm cross site scripting

A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailinglists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public a...