MAL-2025-46998 Malicious code in tdm-shared-core-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f40d5eac324a286d10c565745ab72ab39f4b9ffa1fc95fc0bbf40101f44a6955 The OpenSSF Package Analysis project identified 'tdm-shared-core-library' @ 99.0.3 npm as malicious. It is considered malicious because: - The...

GHSA-QXFV-FCPC-W36X Claude Code rg vulnerability does not protect against approval prompt bypass

Due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on standard Claude Code auto-update will...

CVE-2025-20340

creationtimestamp| type| source ---|---|--- 2025-09-10 16:34:51+00:00| seen| https://gist.github.com/Darkcrai86/742739fa2f51b468b662e79c03b11cb0 2025-09-11 15:21:11+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lyl2f5wckc2e 2025-09-15 00:42:38+00:00| seen|...

CVE-2025-59045

Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through...

CVE-2025-59045 Stalwart vulnerable to Memory Exhaustion via CalDAV Event Expansion

Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through...

CVE-2024-4741 vulnerabilities

Vulnerabilities for packages: openssl-provider-fips, libcrypto3-2.34, openssl...

CVE-2025-10087

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/profitreport.php. Such manipulation of the argument productid leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-58750

creationtimestamp| type| source ---|---|--- 2025-09-10 01:09:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh2dkzvnc2a...

OSV-2025-718 Heap-buffer-overflow in pcpp::ArpLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=443832078 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::ArpLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...

Linux Distros Unpatched Vulnerability : CVE-2024-3325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0. CVE-2024-3325 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2011-0126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory...

Linux Distros Unpatched Vulnerability : CVE-2024-0048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This...

Linux Distros Unpatched Vulnerability : CVE-2024-28832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 EOL allows users with permission to change Global Settings...

Linux Distros Unpatched Vulnerability : CVE-2023-39743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c. CVE-2023-39743 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2019-15547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are...

CVE-2025-9161

creationtimestamp| type| source ---|---|--- 2025-09-09 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-252-04 2025-09-09 15:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyfz2sr3dm2l...

CVE-2025-10087

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/profitreport.php. Such manipulation of the argument productid leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-10087 SourceCodester Pet Grooming Management Software profit_report.php sql injection

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/profitreport.php. Such manipulation of the argument productid leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-10087 SourceCodester Pet Grooming Management Software profit_report.php sql injection

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/profitreport.php. Such manipulation of the argument productid leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-10087

SourceCodester Pet Grooming Management Software 1.0 is affected by a SQL injection in /admin/profit_report.php via the product_id parameter. The vulnerability is exploitable remotely and can be triggered without user interaction, with the exploit publicly disclosed. Root cause: improper handling ...