Malicious code in kk-proxy (npm)

The package kk-proxy was found to contain malicious code...

Malicious code in proxy-prototype (npm)

The package proxy-prototype was found to contain malicious code...

Malicious code in test-mlw2-mains-leany-cinch-proxy (npm)

The package test-mlw2-mains-leany-cinch-proxy was found to contain malicious code...

Malicious code in cors-proxy-server (npm)

The package cors-proxy-server was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-30786 Malicious code in proxy-compile-private-tau-grep (npm)

The package proxy-compile-private-tau-grep was found to contain malicious code...

MAL-2025-20241 Malicious code in fast-proxy-pi-query-zeta (npm)

The package fast-proxy-pi-query-zeta was found to contain malicious code...

MAL-2025-24683 Malicious code in kk-proxy (npm)

The package kk-proxy was found to contain malicious code...

Malicious code in fast-proxy-pi-query-zeta (npm)

The package fast-proxy-pi-query-zeta was found to contain malicious code...

Malicious code in easy-boolean-mock-proxy-stack (npm)

The package easy-boolean-mock-proxy-stack was found to contain malicious code...

MAL-2025-19086 Malicious code in easy-boolean-mock-proxy-stack (npm)

The package easy-boolean-mock-proxy-stack was found to contain malicious code...

MAL-2025-28043 Malicious code in object-easy-route-proxy-bundle (npm)

The package object-easy-route-proxy-bundle was found to contain malicious code...

MAL-2025-38374 Malicious code in view-user-code-proxy-emulate (npm)

The package view-user-code-proxy-emulate was found to contain malicious code...

CVE-2025-20222

A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2024-45339 DESCRIPTION: When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log fil...

CVE-2025-20222 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer Vulnerability

A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This...

CVE-2025-20222 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer Vulnerability

A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This...

CVE-2025-20222

CVE-2025-20222 affects Cisco Secure Firewall ASA/FTD software with IPv6 over IPsec VPN processing in the RADIUS proxy. The root cause is improper handling of IPv6 packets, which could let an unauthenticated remote attacker trigger a device reload and cause a DoS. Cisco's advisory (CISCO-SA-FP2K-I...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 2100 Series IPv6 over IPsec Denial of Service Vulnerability

A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This...

CVE-2025-54864

Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called by the corresponding forge without HTTP Basic authentication. Both forges do however feature HMAC signing with a secret key. Triggering an evaluation can be...

httpd: mod_proxy_http2: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module

An assertion failure flaw was found in Apache httpd. Untrusted clients can send inputs that trigger an assertion failure in the modproxyhttp2 module, which likely results in an Apache HTTP server crash or denial of service DoS...