11084 matches found
MAL-2025-4523 Malicious code in wrapper6 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140a14258e5028ff6bb7a9fd20b73655263c97ed3f7039d184f6f94f2c776121 Any computer that has this package installed or running should be considered...
MAL-2025-4566 Malicious code in k8s-lint-action (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b445cff5be01caddf1be7a89f1cea09fce4135e635b83655ff150c35b8940e86 Any computer that has this package installed or running should be considered...
CERTFR-2025-CTI-008
creationtimestamp| type| source ---|---|--- 2025-05-23 15:19:56+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114557818959394607...
CVE-2025-39504
creationtimestamp| type| source ---|---|--- 2025-05-23 14:47:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17403...
CVE-2024-23800
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions, Tecnomatix Plant Simulation V2302 All versions V2302.0007. The affected applications contain a null pointer dereference vulnerability while parsing specially crafted SPP files. An attacker could leverage this...
CVE-2024-28034
Cross-site scripting vulnerability exists in Mini Thread Version 3.33βi. An arbitrary script may be executed on the web browser of the user accessing the website that uses the product. Note that the developer was unreachable, therefore, users should consider stop using Mini Thread Version 3.33βi...
CVE-2023-24417
Cross-Site Request Forgery CSRF vulnerability in tiggersWelt.Net Worthy plugin = 1.6.5-6497609 versions...
CVE-2023-33640
H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm...
CVE-2022-34286
A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an attacker to execute code in the context of the current...
CVE-2022-29745
Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=deletetransaction...
CVE-2020-12270
React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 contact tracing by using many IDs. NOTE: the vendor disputes the relevance of this report because the recipient of an F1 alert will know it...
MAL-2025-4192 Malicious code in qasj (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4176 Malicious code in gs-pwm-ooba (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4156 Malicious code in @phoenix-common/angular-frontend-library (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4155 Malicious code in @motortrend/sonic-api (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2019-5382
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
BELL-CVE-2025-37973
Bulletin has no description...
GHSA-X5CM-2HPQ-PW57
creationtimestamp| type| source ---|---|--- 2025-05-21 22:11:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114548111014247564...