MAL-2025-43874 Malicious code in commitlint-pm2-proxima-dotenv-safe (npm)

The package commitlint-pm2-proxima-dotenv-safe was found to contain malicious code...

MAL-2025-45092 Malicious code in magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy (npm)

The package magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy was found to contain malicious code...

Malicious code in commitlint-pm2-proxima-dotenv-safe (npm)

The package commitlint-pm2-proxima-dotenv-safe was found to contain malicious code...

Malicious code in dotenv-safe-exoplanetology-exobiology-virgo (npm)

The package dotenv-safe-exoplanetology-exobiology-virgo was found to contain malicious code...

Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm)

The package toml-dotenv-safe-dysonswarm-quantumfoam was found to contain malicious code...

MAL-2025-44061 Malicious code in dotenv-safe-whitedwarf-castor-magnetar (npm)

The package dotenv-safe-whitedwarf-castor-magnetar was found to contain malicious code...

MAL-2025-45994 Malicious code in semantic-release-dotenv-safe-commitlint-node-sass (npm)

The package semantic-release-dotenv-safe-commitlint-node-sass was found to contain malicious code...

MAL-2025-44059 Malicious code in dotenv-safe-polaris-paleoanthropology-filament (npm)

The package dotenv-safe-polaris-paleoanthropology-filament was found to contain malicious code...

MAL-2025-46362 Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm)

The package toml-dotenv-safe-dysonswarm-quantumfoam was found to contain malicious code...

CVE-2025-9824

ImpactThe attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after which an attacker could attempt brute force attacks. PatchesThis vulnerability has been patched, implementing a timing-safe form login...

CVE-2025-48546

In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48546

CVE-2025-48546 affects SafeActivityOptions.java. The issue arises during checkPermissions, enabling a possible background activity launch due to a logic error. This can lead to local escalation of privilege with no additional execution privileges required, and no user interaction needed for explo...

CVE-2025-48546

In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

UBUNTU-CVE-2025-38703

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Make dma-fences compliant with the safe access rules Xe can free some of the data pointed to by the dma-fences it exports. Most notably the timeline name can get freed if userspace closes the associated submit queue. At t...

Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.

...

PT-2025-36067

Name of the Vulnerable Software and Affected Versions: SafeActivityOptions.java affected versions not specified Description: A logic error in the checkPermissions function of SafeActivityOptions.java may allow for the launch of background activities. This could lead to local escalation of privile...

GHSA-MW26-5G2V-HQW3 DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...

GHSA-3GGV-QWCP-J6XG Mautic Vulnerable to User Enumeration via Response Timing

Impact The attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after which an attacker could attempt brute force attacks. Patches This vulnerability has been patched, implementing a timing-safe form login...

Mautic Vulnerable to User Enumeration via Response Timing

Impact The attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after which an attacker could attempt brute force attacks. Patches This vulnerability has been patched, implementing a timing-safe form login...

CVE-2025-9824

ImpactThe attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after which an attacker could attempt brute force attacks. PatchesThis vulnerability has been patched, implementing a timing-safe form login...