MAL-2025-32780 Malicious code in scentek (npm)

The package scentek was found to contain malicious code...

MAL-2025-21999 Malicious code in grunt-spinner-janus-tool (npm)

The package grunt-spinner-janus-tool was found to contain malicious code...

MAL-2025-23127 Malicious code in india-delta-ybzv (npm)

The package india-delta-ybzv was found to contain malicious code...

MAL-2025-35102 Malicious code in test-mlw2-coals-gaumy (npm)

The package test-mlw2-coals-gaumy was found to contain malicious code...

MAL-2025-25571 Malicious code in long-scale-static-report-float (npm)

The package long-scale-static-report-float was found to contain malicious code...

MAL-2025-7193 Malicious code in @crabas0npm/at-inventore-vel (npm)

The package @crabas0npm/at-inventore-vel was found to contain malicious code...

MAL-2025-26199 Malicious code in mercahnt (npm)

The package mercahnt was found to contain malicious code...

MAL-2025-29633 Malicious code in prettier-unuk-genomics-docusaurus (npm)

The package prettier-unuk-genomics-docusaurus was found to contain malicious code...

MAL-2025-18478 Malicious code in discord.app (npm)

The package discord.app was found to contain malicious code...

Malicious code in @amber-team/report-bundle-diff (npm)

The package @amber-team/report-bundle-diff was found to contain malicious code...

MAL-2025-8442 Malicious code in @malware-test-abbot-roars-newly-grain/test-mlw3-abbot-roars-newly-grain (npm)

The package @malware-test-abbot-roars-newly-grain/test-mlw3-abbot-roars-newly-grain was found to contain malicious code...

MAL-2025-7316 Malicious code in @crabas0npm/facere-laboriosam-id (npm)

The package @crabas0npm/facere-laboriosam-id was found to contain malicious code...

Malicious code in authenticate-enum-report-query-moon (npm)

The package authenticate-enum-report-query-moon was found to contain malicious code...

Malicious code in gama-report (npm)

The package gama-report was found to contain malicious code...

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302 Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302

CVE-2025-20302 : Cisco Secure FMC Software’s web-based management interface contains a missing authorization check that could let an authenticated, low-privileged, remote attacker retrieve a generated report from a different domain managed on the same FMC instance. The attacker could directly acc...

CVE-2025-54389

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...

CVE-2025-54389 AIDE improper output neutralization vulnerability

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...