MAL-2025-27718 Malicious code in nongqhui (npm)

The package nongqhui was found to contain malicious code...

MAL-2025-27666 Malicious code in node-zenvia (npm)

The package node-zenvia was found to contain malicious code...

MAL-2025-20274 Malicious code in fbdeoxicwnlkgkvt (npm)

The package fbdeoxicwnlkgkvt was found to contain malicious code...

Malicious code in aws-enumerate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82e411db1ea78935340bd950942b13579b400264ddef042aa0b07d6952401c45 Package for enumeratin IAM --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-08-aws-enumerate Reasons base...

CVE-2025-53817

creationtimestamp| type| source ---|---|--- 2025-07-17 15:21:08+00:00| seen| https://bsky.app/profile/securitylab.github.com/post/3lu6abggi6s2z 2025-07-18 15:56:31+00:00| seen| https://seclists.org/oss-sec/2025/q3/51 2025-07-18 18:10:46+00:00| seen|...

CVE-2025-52379

creationtimestamp| type| source ---|---|--- 2025-07-15 14:15:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857668518872739...

CVE-2022-49965

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing -finixxxx interfaces for some SMU13 asics Without these, potential memory leak may be induced...

CVE-2025-21479

creationtimestamp| type| source ---|---|--- 2025-06-02 12:22:00+00:00| seen| https://thehackernews.com/2025/06/qualcomm-fixes-3-zero-days-used-in.html 2025-06-02 14:45:09+00:00| seen| https://poliverso.org/objects/0477a01e-80cca610-9993d4957996c583 2025-06-02 15:20:33+00:00| seen|...

Malicious code in @bmwfedev/playwright-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

ArcGIS Insecure OAuth 2.0 Implementation

The ArcGIS clientcredentials OAuth 2.0 API implementation does not adhere to the RFC/standards; This hidden known and by-design, but undocumented functionality enables a requester referred to as client in RFC 6749 to request an, undocumented, custom token expiration from ArcGIS referred to as...

CVE-2025-4881

creationtimestamp| type| source ---|---|--- 2025-05-18 14:20:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphawalir4b2 2025-05-18 17:12:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjxus5f2h...

CVE-2025-3518 File upload functionality possible even when disabled

It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled. The file upload functionality can be enabled or disabled for specific use cases through configuration. In case the functionality is disabled for at least one use case, the...

CVE-2025-32851

creationtimestamp| type| source ---|---|--- 2025-04-16 20:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605425587251 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01...

CVE-2025-3240

creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10435 2025-04-04 13:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyiciu7o72z 2025-04-04 14:40:15+00:00| seen|...

CVE-2025-32052

creationtimestamp| type| source ---|---|--- 2025-04-03 14:34:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274523381930955 2025-04-03 14:34:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274523381930955 2025-04-03 15:07:17+00:00| seen|...

SAP NetWeaver Application Server Java Authorization Issues Vulnerability

SAP NetWeaver Application Server Java is an application server from SAP. An authorization issue vulnerability exists in SAP NetWeaver Application Server Java, which arises from the program not properly checking the authorization of the service endpoint, no details of the vulnerability are availab...

AWS VDP: Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints

The AWS Kendra Intelligent Ranking service was found to incorrectly report the user-agent and network information as "AWS Internal" for four API endpoints that are FIPS endpoints. This issue can lead to the obscuring of request information that may be used to track down an adversary...

CVE-2025-0652

Removed by vendor...

PT-2025-10570 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly provided, but it appears to be related to a security concern, possibly an XSS issue, as indicated by the hashtag xss. No details about t...

Linux Distros Unpatched Vulnerability : CVE-2024-49861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix helper writes to read-only maps Lonial found an issue that despite user- and BPF-side frozen BPF map like in case of .rodata, it was still possible to...