CVE-2025-59957

CVE-2025-59957 affects Juniper Networks Junos OS on EX4600 Series and QFX5000 Series switches. Affected versions: all prior to 21.4R3 and 22.2 prior to 22.2R3-S3. The vulnerability is a runtime/Origin Validation Error in an insufficient protected file , allowing an unauthenticated attacker with p...

Exploit for Use After Free in Redis

CVE-2025-49844 - Redis Lua Interpreter Exploit !yuri08loveel...

Malicious code in @testcarrot/supply7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3fc279837edb0be645020c30f0d706a43f965e28e6efef716e2283301fe06e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c6b1ac7e0d732e96fb12ebfc09964c4e8a5a58fb8b0a2dc11dab3fad6c78359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48101 Malicious code in @testcarrot/supply6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1879de03e36cf280adcff93d8fbfe8537bb68de7e372b70c0e6b80adbdfe21bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-34252

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...

FlowiseAI/Flosise has File Upload vulnerability

Summary A file upload vulnerability in FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web shells on the server, potentially leading to Remote Code Execution RCE. Details The system fails to...

Malicious code in redirect-x4imdv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e340a1fc9722ec202ee8f89e3e9f546aacee8d861f577e4fad9fe2bb02752023 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-nuyvwk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35133a0ea653785ed6a6339636f560ca0db12d687272233f4a250d7931cc1f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-q4vs8m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4164bf8a8a4ab59343241716ae2cbcdc9123ddadd837ef9a70d6578cf75b446b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-l6qi9e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7c9759afb33de9be7fc7e051d5e7c5b3f74868b9887fec3b2e4d7b892d3fa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-a1gs61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 698eecacc2b74ea1bee2f5353e823c9266d05f1b70a1fd176dcc8f74d6d112ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-r3s2jv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 584d7941602b2c0131393c7aee110a515c753647016285ece743e5c03fa9df9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48058 Malicious code in redirect-h0i672 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b4efe272664ff868b1e9c5a05a87a2f41bf88048d2e4729407cf8932c4af18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48063 Malicious code in redirect-l0m7on (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f0c29bd299b19cfd665b1cc3de528b54629cf325cb6bf340e928a922f62f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48064 Malicious code in redirect-l6qi9e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7c9759afb33de9be7fc7e051d5e7c5b3f74868b9887fec3b2e4d7b892d3fa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48044 Malicious code in redirect-3viu68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241a41d0003d0cf1fa1c5cc576172322520772e7d459469dcbccf8423132d6f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48041 Malicious code in redirect-0g91q6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48051 Malicious code in redirect-ci4ynt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6192340fc5c992962663104944e345473999ca164f0e87b9edbc7ec0a6898e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qr-code-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6749d8eadfe0585d427c6322c10d15c81e3e58171b08a31de2a4abbaddfb9264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...