MAL-2025-192576 Malicious code in sd-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429e5a82bf0260fda2c531fb7909cf8b8417e424119df889ee7bad0ca4b439c2 The package sd-security was found to contain malicious code. Source: ghsa-malware e295e65302840407a5f64ae51ff2616121573aa518cd29d40198edf692c604de An...

Malicious code in sd-skbms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d7af5c9829af6d62bf3237e014e1a9a6cbcd30be7eb56096229f226428f607 The package sd-skbms was found to contain malicious code. Source: ghsa-malware 9cf1a086ee102f5bbaa7b18b6512f3457de46a88a240dd3acda1bcfffe28f58c Any...

MAL-2025-192577 Malicious code in sd-skbms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d7af5c9829af6d62bf3237e014e1a9a6cbcd30be7eb56096229f226428f607 The package sd-skbms was found to contain malicious code. Source: ghsa-malware 9cf1a086ee102f5bbaa7b18b6512f3457de46a88a240dd3acda1bcfffe28f58c Any...

Malicious code in sd-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429e5a82bf0260fda2c531fb7909cf8b8417e424119df889ee7bad0ca4b439c2 The package sd-security was found to contain malicious code. Source: ghsa-malware e295e65302840407a5f64ae51ff2616121573aa518cd29d40198edf692c604de An...

Malicious code in phx-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d The package phx-core was found to contain malicious code. Source: ghsa-malware 44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d Any...

MAL-2025-192572 Malicious code in phx-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d The package phx-core was found to contain malicious code. Source: ghsa-malware 44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d Any...

MAL-2025-192571 Malicious code in paypal-scripts-server-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba55fed7af17fadd676b95594de23778a414dc138beda86d133775a45fdcb03c The package paypal-scripts-server-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in @mohamed1687/iut-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c488ccf33f70ad27f3dba325a7686c40ac429f84d8ae53d608dc8103e1320adb The package @mohamed1687/iut-encrypt was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192570 Malicious code in @mohamed1687/iut-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c488ccf33f70ad27f3dba325a7686c40ac429f84d8ae53d608dc8103e1320adb The package @mohamed1687/iut-encrypt was found to contain malicious code. Source: ghsa-malware...

CVE-2025-66388: Insertion of Sensitive Information Into Sent Data

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this...

SUSE SLES15 Security Update : kubernetes1.23 (SUSE-SU-2025:02423-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02423-2 advisory. - CVE-2021-25743: Escape terminal special characters in kubectl output bsc1194400. - CVE-2023-2431: Prevent pods to bypass the...

CVE-2025-36753

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

CVE-2025-36753 SWD Interface Open on Growatt ShineLan-X

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

CVE-2025-36753 SWD Interface Open on Growatt ShineLan-X

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

CVE-2025-36753

The CVE-2025-36753 entry concerns the Growatt ShineLan-X dongle with the SWD debug interface enabled by default. The exposed SWD interface allows an attacker to gain debug access and potentially extract secrets or domains from the device. The root cause is the default-access SWD debug interface; ...

Sensitive Information Disclosure

Jenkins ReadyAPI Functional Testing Plugin is vulnerable to Sensitive Information Disclosure. The vulnerability is due to storing license keys, client secrets, and passwords in plaintext in job configuration files, allowing users with Item/Extended Read permission or file system access on the...

CVE-2025-36753: Authentication Bypass by Spoofing

The SWD debug interface on the Growatt ShineLan-X communication dongle is available by default, allowing an attacker to attain debug access to the device and to extracting secrets or domains from within the device...

Growatt ShineLan-X 安全漏洞

Growatt ShineLan-X is a data logger for PV inverters from Growatt China. A security vulnerability exists in Growatt ShineLan-X, which stems from the SWD debugging interface enabled by default and could lead to the extraction of device secrets or domains...

CVE-2025-67727

Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access to GitHub secrets and write permission...

Malicious code in kashif-mallah-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3015dc78458d21da40c01cf159c54f0298cd4ce7ea2604eecc18a7ea906cdd The package kashif-mallah-fca was found to contain malicious code. Source: ghsa-malware...