Exploit for Improperly Implemented Security Check for Standard in Fortinet Fortiproxy

watchTowr-vs-Fortiweb-AuthBypass Detection Artifact Generator...

Your passport, now on your iPhone. Helpful or risky?

Apple has launched Digital ID, a way for users in the US to create and present a government-issued ID in Apple Wallet using their passport information. For now, it works only for identity verification at Transportation Security Administration TSA checkpoints in more than 250 airports. Apple says...

PT-2025-48308

Name of the Vulnerable Software and Affected Versions Huawei HarmonyOS versions 5.0.1 through 5.1.0 Huawei HarmonyOS version 6.0.0 Description An improper criterion security check exists within the call module. Successful exploitation of this issue may cause features to perform abnormally...

Fedora: Security Advisory (FEDORA-2025-a99a329e1b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tracing: dynevent: Add a missing lockdown check on dynevent

...

CVE-2025-25255

An Improperly Implemented Security Check for Standard vulnerability CWE-358 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user ...

Malicious code in token_security_check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b62a85484e47dd76287cbde832200d5fed78a12b681c06710549f39f11bb433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tokensecuritycheck is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48238 Malicious code in token_security_check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b62a85484e47dd76287cbde832200d5fed78a12b681c06710549f39f11bb433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2002-0893

Malware in sbrugna...

EUVD-2010-1474

Malware in sbrugna...

EUVD-2020-3528

Malware in sbrugna...

EUVD-2008-6703

Malware in sbrugna...

EUVD-2006-4458

Malware in sbrugna...

EUVD-2007-4891

Malware in sbrugna...

EUVD-2021-17124

Malware in sbrugna...

EUVD-2006-4538

Malware in sbrugna...

EUVD-2019-7044

Malware in sbrugna...

EUVD-2021-2100

Malware in sbrugna...

EUVD-2024-2442

Malicious code in bioql PyPI...