Malicious code in @zalastax/nolb-gooh (npm)

The package @zalastax/nolb-gooh was found to contain malicious code...

Malicious code in scope-gatsby (npm)

The package scope-gatsby was found to contain malicious code...

Malicious code in test-mlw2-clipt-tuned-troke-scope (npm)

The package test-mlw2-clipt-tuned-troke-scope was found to contain malicious code...

MAL-2025-9058 Malicious code in @malware-test-wanly-dunno-nulls-jaups/test-mlw3-wanly-dunno-nulls-jaups (npm)

The package @malware-test-wanly-dunno-nulls-jaups/test-mlw3-wanly-dunno-nulls-jaups was found to contain malicious code...

MAL-2025-8736 Malicious code in @malware-test-judas-nyala-spean-softa/test-mlw3-judas-nyala-spean-softa (npm)

The package @malware-test-judas-nyala-spean-softa/test-mlw3-judas-nyala-spean-softa was found to contain malicious code...

MAL-2025-35092 Malicious code in test-mlw2-clipt-tuned-troke-scope (npm)

The package test-mlw2-clipt-tuned-troke-scope was found to contain malicious code...

MAL-2025-32808 Malicious code in scope-gatsby (npm)

The package scope-gatsby was found to contain malicious code...

MAL-2025-8935 Malicious code in @malware-test-sones-amove-roosa-hyena/test-mlw3-sones-amove-roosa-hyena (npm)

The package @malware-test-sones-amove-roosa-hyena/test-mlw3-sones-amove-roosa-hyena was found to contain malicious code...

MAL-2025-9085 Malicious code in @malware-test-yucca-moras-pekes-lades/test-mlw3-yucca-moras-pekes-lades (npm)

The package @malware-test-yucca-moras-pekes-lades/test-mlw3-yucca-moras-pekes-lades was found to contain malicious code...

CVE-2025-49556

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

CISA: Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators

This guidance outlines a process for OT owners and operators to create an asset inventory and OT taxonomy. This process includes defining scope and objectives for the inventory, identifying assets, collecting attributes, creating a taxonomy, managing data, and implementing asset life cycle...

Magento Cross-site Scripting vulnerability

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. These scripts may be...

GHSA-8MQ8-C243-2335 Magento Cross-site Scripting vulnerability

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. These scripts may be...

CVE-2025-49555

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a w...

CVE-2025-49557

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker...

CVE-2025-49556 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

CVE-2025-49556 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

CVE-2025-49557 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker...

CVE-2025-49555

CVE-2025-49555 affects Adobe Commerce/Magento Open Source (versions 2.4.9-alpha1 through earlier) with a Cross-Site Request Forgery (CSRF) vulnerability that can lead to privilege escalation when a user is authenticated. Exploitation requires user interaction (victim visits malicious site or clic...

CVE-2025-49555

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a w...