MAL-2025-33443 Malicious code in small-psi-unix-execute-report (npm)

The package small-psi-unix-execute-report was found to contain malicious code...

MAL-2025-15329 Malicious code in bad-spy-shell-report-assert (npm)

The package bad-spy-shell-report-assert was found to contain malicious code...

MAL-2025-15670 Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

MAL-2025-27298 Malicious code in nercomp (npm)

The package nercomp was found to contain malicious code...

MAL-2025-37610 Malicious code in uisomaker (npm)

The package uisomaker was found to contain malicious code...

MAL-2025-37924 Malicious code in upsilon-decode-gamma-slow-report (npm)

The package upsilon-decode-gamma-slow-report was found to contain malicious code...

MAL-2025-35102 Malicious code in test-mlw2-coals-gaumy (npm)

The package test-mlw2-coals-gaumy was found to contain malicious code...

MAL-2025-31394 Malicious code in quinoa-yearling-iem3 (npm)

The package quinoa-yearling-iem3 was found to contain malicious code...

MAL-2025-28368 Malicious code in optimize-root-minify-long-grid (npm)

The package optimize-root-minify-long-grid was found to contain malicious code...

MAL-2025-25571 Malicious code in long-scale-static-report-float (npm)

The package long-scale-static-report-float was found to contain malicious code...

MAL-2025-25570 Malicious code in long-report-info-emulate-small (npm)

The package long-report-info-emulate-small was found to contain malicious code...

MAL-2025-9109 Malicious code in @my-reports/express-report (npm)

The package @my-reports/express-report was found to contain malicious code...

MAL-2025-27265 Malicious code in neetomo (npm)

The package neetomo was found to contain malicious code...

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302 Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302

CVE-2025-20302 : Cisco Secure FMC Software’s web-based management interface contains a missing authorization check that could let an authenticated, low-privileged, remote attacker retrieve a generated report from a different domain managed on the same FMC instance. The attacker could directly acc...

CVE-2025-54389

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...

CVE-2025-54389 AIDE improper output neutralization vulnerability

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...

CVE-2025-54389 AIDE improper output neutralization vulnerability

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...