Malicious code in html-patcher (npm)

The package html-patcher was found to contain malicious code...

Malicious code in solara-patcher-legacy (npm)

The package solara-patcher-legacy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

formii (1.0.0), html-patcher-stream (>=1.0.0, <=1.1.0) +1 more potentially affected by unknown CVE via html-patcher (>=0.0.3, <=0.1.0)

html-patcher NPM version =0.0.3, =1.0.0, =0.1.0, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-22751...

MAL-2025-22751 Malicious code in html-patcher (npm)

The package html-patcher was found to contain malicious code...

MAL-2025-33626 Malicious code in solara-patcher-legacy (npm)

The package solara-patcher-legacy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2019-12169

ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/core/languages/languageimport.php aka Import New Language or mods/standard/patcher/indexadmin.php aka Patcher component...

Malware in vite-logging-patcher

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3800 Malicious code in vite-logging-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 704430ee3cb7da0b6e3eb0d7736f061b92391ab9b42f45be36bb3b6c68a16f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-logging-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 704430ee3cb7da0b6e3eb0d7736f061b92391ab9b42f45be36bb3b6c68a16f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-logging-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bf5e5919b2540c762616d719c6fa3bfc0baa1dc65bb926ef097766659727298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3796 Malicious code in next-logging-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bf5e5919b2540c762616d719c6fa3bfc0baa1dc65bb926ef097766659727298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in next-logging-patcher

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in next-log-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfce41719d550a7097080921b8d71c939042745806269bbd66ba0e2033dee574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3581 Malicious code in next-log-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfce41719d550a7097080921b8d71c939042745806269bbd66ba0e2033dee574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in next-log-patcher

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-41662 VNote vulnerable to Markdown XSS, which leads to RCE

VNote is a note-taking platform. A Cross-Site Scripting XSS vulnerability has been identified in the Markdown rendering functionality of versions 3.18.1 and prior of the VNote note-taking application. This vulnerability allows the injection and execution of arbitrary JavaScript code through which...

Scanner-and-Patcher - A Web Vulnerability Scanner And Patcher

This tools is very helpful for finding vulnerabilities present in the Web Applications. A web application scanner explores a web application by crawling through its web pages and examines it for security vulnerabilities, which involves generation of malicious inputs and evaluation of application'...

Malicious code in mineflayer-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5249a1e663bcc7ec837346cbcd549a3e0e2af0039ffd68a532f043c025ec119f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices

On April 20, 2021, Mandiant published detailed results of our investigations into compromised Pulse Secure devices by suspected Chinese espionage operators. This blog post is intended to provide an update on our findings, give additional recommendations to network defenders, and discuss potential...

kube-apiserver: DoS with crafted patch of type json-patch

A denial of service vulnerability was found in the Kubernetes API server. A remote user, with authorization to apply patches, could exploit this via crafted JSON input, causing excessive consumption of resources and subsequent denial of service...