Malicious code in run-script-meissa-charon-sedna (npm)

The package run-script-meissa-charon-sedna was found to contain malicious code...

change-object (0.0.0), cli-qa (2.0.0) +7 more potentially affected by unknown CVE via run-serially (0.0.0)

run-serially NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object 0.0.0 - cli-qa 2.0.0 - comma-list 0.0.0 - fd-select 1.0.0 - frp-tick 1.0.0 - innkeeper 1.0.4 - limited-parallel-loop 0.0.0 ...

MAL-2025-20039 Malicious code in exec-concurrently-run-script-pm2 (npm)

The package exec-concurrently-run-script-pm2 was found to contain malicious code...

MAL-2025-32558 Malicious code in run-dev (npm)

The package run-dev was found to contain malicious code...

MAL-2025-20110 Malicious code in extremophile-venus-neptune-run-script (npm)

The package extremophile-venus-neptune-run-script was found to contain malicious code...

MAL-2025-32603 Malicious code in saber-run (npm)

The package saber-run was found to contain malicious code...

MAL-2025-37956 Malicious code in ursa-run-script-hermes-bulma (npm)

The package ursa-run-script-hermes-bulma was found to contain malicious code...

MAL-2025-32565 Malicious code in run-serially (npm)

The package run-serially was found to contain malicious code...

MAL-2025-15719 Malicious code in biotechnology-parsec-cosmiconfig-run-script (npm)

The package biotechnology-parsec-cosmiconfig-run-script was found to contain malicious code...

MAL-2025-17876 Malicious code in cycle-monorepo-sandbox-rx-run (npm)

The package cycle-monorepo-sandbox-rx-run was found to contain malicious code...

MAL-2025-23277 Malicious code in interferometry-europa-run-script-xanthus (npm)

The package interferometry-europa-run-script-xanthus was found to contain malicious code...

Malicious code in browser-run (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b45aebce3647704ac54d30a38e86493e0246f9ea44131394f84628656ef00ed Package uses the name as popular NPM package https://www.npmjs.com/package/browser-run, but the only thing it does is adding a hardcoded public SSH key and the...

MAL-2025-191696 Malicious code in browser-run (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b45aebce3647704ac54d30a38e86493e0246f9ea44131394f84628656ef00ed Package uses the name as popular NPM package https://www.npmjs.com/package/browser-run, but the only thing it does is adding a hardcoded public SSH key and the...

Yet Another Mirage of Breaking MIRAGE: Debunking Occupancy-Based Side-Channel Attacks on Fully Associative Randomized Caches

Recent work presented at USENIX Security 2025 claims that occupancy-based attacks can recover AES keys from the MIRAGE randomized cache. In this paper, we examine these claims and find that they arise from fundamental modeling flaws. Most critically, the authors' simulation of MIRAGE uses a...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Aug 2025)

This host is missing a critical security update according to Microsoft Office Click-to-Run update August 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Description of the security update for Excel 2016: August 12, 2025 (KB5002758)

None None...

End of support for Office 2016 and Office 2019

None None...

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2025-32604 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP affected versions not specified Description: SAP NetWeaver Application Server for ABAP is susceptible to a cross-site scripting issue. An unauthenticated attacker can create a URL containing a malicio...

Security Updates for Microsoft Excel Products (August 2025)

The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-53735, CVE-2025-53737,...