MAL-2025-49622 Malicious code in yanti-bubur12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a391f7cdaa166ba3c172b70dcf5320801b626982ea988166a97aa28ee678f9c The package yanti-bubur12-riris was found to contain malicious code...

MAL-2025-49474 Malicious code in zain-lepet73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7970e8ec39649fc7c2c4c7cda589cbeec9f1b93c70fc98b8e9ebb6ba570e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49437 Malicious code in study-lab-e52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50708d98a0ca76a26e4b2f4ba435e4dec98c82e20f6fa80926cfd924adea2e06 The package study-lab-e52 was found to contain malicious code...

Malicious code in finalmoyloyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55125b342b47dcefababdb74478820644fd9f4e19a428dd6e84e7af021cd1bf1 The package finalmoyloyt was found to contain malicious code...

GHSA-PWHC-RPQ9-4C8W vulnerabilities

Vulnerabilities for packages: osv-scanner, k9s, helm, docker-cli-buildx, gogatekeeper, helm-operator, wolfictl, rancher-fleet, syft, cert-manager-cmctl, fuse-overlayfs-snapshotter, spegel, k3s, steampipe, newrelic-infrastructure-agent, kaniko, kubescape-operator, opa, zot, neuvector-scanner, triv...

CVE-2025-63717

creationtimestamp| type| source ---|---|--- 2025-11-07 21:35:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m52zultlcb2j...

CVE-2022-50592

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘getInventoryReportData’ parameter to the ‘NetworkServlet’ endpoint...

EUVD-2025-38321

Malicious code in payouts-report npm...

Malicious code in payouts-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becec2c60d20e2a05077102cbd8851073afafea45cec70202a05d3af32bb3ccc The package payouts-report was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49391 Malicious code in payouts-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becec2c60d20e2a05077102cbd8851073afafea45cec70202a05d3af32bb3ccc The package payouts-report was found to contain malicious code. Source: ossf-package-analysis...

Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts

Google on Thursday said it's rolling out a dedicated form to allow businesses listed on Google Maps to report extortion attempts made by threat actors who post inauthentic bad reviews on the platform and demand ransoms to remove the negative comments. The approach is designed to tackle a common...

PT-2025-45480

Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0 Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization,...

CVE-2025-64179

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below, missing authentication in the /api/v1/usage-report/summary endpoint allows anyone to retrieve aggregate API usage counts. While no sensitive data is disclosed, the endpoint may...

CVE-2025-64179 lakeFS: Unauthenticated access to API usage metrics

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below, missing authentication in the /api/v1/usage-report/summary endpoint allows anyone to retrieve aggregate API usage counts. While no sensitive data is disclosed, the endpoint may...

CVE-2025-64179

lakeFS versions

CVE-2025-64179 lakeFS: Unauthenticated access to API usage metrics

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below, missing authentication in the /api/v1/usage-report/summary endpoint allows anyone to retrieve aggregate API usage counts. While no sensitive data is disclosed, the endpoint may...

CVE-2025-64179 lakeFS: Unauthenticated access to API usage metrics

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below, missing authentication in the /api/v1/usage-report/summary endpoint allows anyone to retrieve aggregate API usage counts. While no sensitive data is disclosed, the endpoint may...

EUVD-2025-38161

IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

EUVD-2025-38172

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the...

CVE-2022-50592

Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the ‘getInventoryReportData’ parameter to the ‘NetworkServlet’ endpoint...