83344 matches found
Malicious code in transaction-report (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c40d933bc68a269e1fe8750bef686c53bbc78251b864aec8d83093a175fcac Any computer that has this package installed or running should be considered...
MAL-2025-693 Malicious code in transaction-report (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c40d933bc68a269e1fe8750bef686c53bbc78251b864aec8d83093a175fcac Any computer that has this package installed or running should be considered...
GHSA-FC89-JGHX-8PVG
creationtimestamp| type| source ---|---|--- 2025-01-30 15:58:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113918130082310835...
CVE-2025-23367
creationtimestamp| type| source ---|---|--- 2025-01-30 15:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnyemmy2e 2025-01-30 18:12:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3499 2025-01-30 18:27:06+00:00| seen| https://t.me/cvedetector/16801...
CVE-2025-0871
creationtimestamp| type| source ---|---|--- 2025-01-30 15:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxrnt5xpm2h 2025-01-30 18:27:02+00:00| seen| https://t.me/cvedetector/16799...
CVE-2024-13720
creationtimestamp| type| source ---|---|--- 2025-01-30 14:17:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxofak4jv27 2025-01-30 15:32:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113918025705481072 2025-01-30 16:46:22+00:00| seen|...
CVE-2025-0747
creationtimestamp| type| source ---|---|--- 2025-01-30 12:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhm6qxgx2b 2025-01-30 13:11:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3477 2025-01-30 14:15:53+00:00| seen| https://t.me/cvedetector/16757...
CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware
CISA released a fact sheet, Contec CMS8000 Contains a Backdoor, detailing an analysis of three firmware package versions of the Contec CMS8000, a patient monitor used by the U.S. Healthcare and Public Health HPH sector. Analysts discovered that an embedded backdoor function with a hard-coded IP...
CVE-2024-13706
creationtimestamp| type| source ---|---|--- 2025-01-30 11:15:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113917016533701154 2025-01-30 11:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeaeslcw2w 2025-01-30 13:11:26+00:00| seen|...
CVE-2025-21107
creationtimestamp| type| source ---|---|--- 2025-01-30 09:26:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113916587999368700 2025-01-30 11:18:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3472 2025-01-30 12:35:30+00:00| seen| https://t.me/cvedetector/16749 2025-01-30...
CVE-2024-12921
creationtimestamp| type| source ---|---|--- 2025-01-30 05:25:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113915640840193737 2025-01-30 06:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti7re2v2t 2025-01-30 07:11:22+00:00| seen|...
CVE-2025-0848
creationtimestamp| type| source ---|---|--- 2025-01-30 01:33:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113914727312277831 2025-01-30 02:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwg3kux642t 2025-01-30 03:18:43+00:00|...
PT-2025-5353 · Unknown +1 · Kubewarden-Controller +1
Name of the Vulnerable Software and Affected Versions: kubewarden-controller versions prior to 1.21.0 Description: The issue concerns the validation of namespaced resources by AdmissionPolicy and AdmissionPolicyGroup policies in kubewarden-controller. An attacker can exploit this to prevent the...
PT-2025-5376 · Broadcom · Symantec Privileged Access Management
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to improper input validation in the CSRF filter, which results in unsanitized user input being written to the application logs. No...
GHSA-8655-XGH5-5VVQ vulnerabilities
Vulnerabilities for packages: nushell...
GHSA-R2X6-CJG7-8R43
creationtimestamp| type| source ---|---|--- 2025-01-29 20:36:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113913558925506767 2025-01-29 21:11:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3399...
observaciones-andromeda.es Cross Site Scripting vulnerability OBB-4018339
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-33G6-495W-V8J2 Snowflake JDBC uses insecure temporary credential cache file permissions
Issue Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver will cache temporary credentials locally in a world-readable file. This vulnerability affects versions 3.6.8 through...
CVE-2024-10001
GitHub Enterprise Server is affected by CVE-2024-10001. The vulnerability arises from an improper sequence of validation in the message handling function: the origin check occurs after accepting a user-controlled identity property, enabling a code injection via the query selector and exfiltration...