Malicious code in yuni-nasi3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975afb3d443e6de6d98cf0f41126a87e99818e2a9b4be92b98e10154671a167 The package yuni-nasi3-breki was found to contain malicious code...

MAL-2025-49556 Malicious code in zul-oblok39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a5ae8a15c1cdd8bcd1edce0af4020ebddef4e3714efbf6f460b21a1a9a3b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64486

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary assets in FB2 files, allowing an attacker to write arbitrary files on the filesystem when viewing or converting a malicious FictionBook file. This can be leveraged to achieve...

CVE-2025-12907

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...

EUVD-2025-38289

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

PT-2025-45448

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

CVE-2022-50593

creationtimestamp| type| source ---|---|--- 2025-11-06 21:40:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yjplah4a2b...

RHSA-2025:19835 Red Hat Security Advisory: bind security update

Bulletin has no description...

DEBIAN-CVE-2025-43430

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-43335

CVE-2025-43335 is a macOS vulnerability addressed by Apple in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. The issue involves a logic issue that could allow an app to access user‑sensitive data. Public records from NVD/Red Hat entries align on the fixed versions and the data e...

Mageia: Security Advisory (MGASA-2025-0254)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-44803

CVE-2025-45959 - No vulnerability title. CVE ID : CVE-2025-45959 Published : Nov. 3, 2025, 6:16 p.m. | 1 hour, 42 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a...

Fedora: Security Advisory (FEDORA-2025-a7cea1535d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-12194 vulnerabilities

Vulnerabilities for packages: opensearch...

Malicious code in spectral-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b1d60d661e6371af32c270f14fcb010fbb6dbebca0f1ecdf268ec1c048a957 The package spectral-utils was found to contain malicious code...

CVE-2025-23050

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read or division by zero. This is fixed in 5.15.19, 6.5.9, and 6.8.2...

Malicious code in epic-react-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b94ef197699c924d3128263cbe7437ace4318b5dc44b80d8e1a0e5d1fc5946 The package epic-react-common was found to contain malicious code...

EUVD-2025-37171

Malicious code in epic-comment-rating-frontend npm...

Malicious code in epic-ue-spotlight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd396aa1bdd76e462e346d6e3ab3dd2396963c3c215ff74a6a7c8aaff2ffebe0 The package epic-ue-spotlight was found to contain malicious code...

MAL-2025-49166 Malicious code in epic-node-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4207720525d69e9c09afb392295f1566d480abc128a98065be73bb7044e93291 The package epic-node-blog was found to contain malicious code...