Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

Malicious code in gamma-throw-report-deserialize-uglify (npm)

The package gamma-throw-report-deserialize-uglify was found to contain malicious code...

MAL-2025-35102 Malicious code in test-mlw2-coals-gaumy (npm)

The package test-mlw2-coals-gaumy was found to contain malicious code...

MAL-2025-25571 Malicious code in long-scale-static-report-float (npm)

The package long-scale-static-report-float was found to contain malicious code...

MAL-2025-9109 Malicious code in @my-reports/express-report (npm)

The package @my-reports/express-report was found to contain malicious code...

MAL-2025-33443 Malicious code in small-psi-unix-execute-report (npm)

The package small-psi-unix-execute-report was found to contain malicious code...

MAL-2025-15670 Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

MAL-2025-27298 Malicious code in nercomp (npm)

The package nercomp was found to contain malicious code...

MAL-2025-31793 Malicious code in react-googleplaces-component (npm)

The package react-googleplaces-component was found to contain malicious code...

MAL-2025-38823 Malicious code in waterfall-kelp-vku005-project (npm)

The package waterfall-kelp-vku005-project was found to contain malicious code...

MAL-2025-7193 Malicious code in @crabas0npm/at-inventore-vel (npm)

The package @crabas0npm/at-inventore-vel was found to contain malicious code...

MAL-2025-27180 Malicious code in nebula-titan-3g9w (npm)

The package nebula-titan-3g9w was found to contain malicious code...

MAL-2025-21999 Malicious code in grunt-spinner-janus-tool (npm)

The package grunt-spinner-janus-tool was found to contain malicious code...

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302 Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-20302

CVE-2025-20302 : Cisco Secure FMC Software’s web-based management interface contains a missing authorization check that could let an authenticated, low-privileged, remote attacker retrieve a generated report from a different domain managed on the same FMC instance. The attacker could directly acc...

CVE-2025-54389

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...

CVE-2025-54389 AIDE improper output neutralization vulnerability

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...

CVE-2025-54389 AIDE improper output neutralization vulnerability

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...