11085 matches found
Malicious code in vue-sectest (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3364 Malicious code in @sporta-technology/d11-web-components.text-link (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3360 Malicious code in @sporta-technology/d11-web-components.tags.tags-counter (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3335 Malicious code in @sporta-technology/d11-web-components.input (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sas-dvr/ltjs-commons (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-3454
creationtimestamp| type| source ---|---|--- 2025-04-23 08:30:30+00:00| seen| https://bsky.app/profile/grafana.bsky.social/post/3lnhroytxvs2w 2025-04-23 10:38:14+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lnhytg4c222p 2025-04-26 10:03:20+00:00| seen|...
GHSA-33QR-M49Q-RXFX
creationtimestamp| type| source ---|---|--- 2025-04-22 20:52:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114383596774137374 2025-04-22 21:04:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12980...
CVE-2025-32965
CVE-2025-32965 affects xrpl.js, a JavaScript/TypeScript API for the XRP Ledger. Versions 4.2.1–4.2.4 and 2.14.2 are compromised, containing malicious code designed to exfiltrate private keys. The High-risk impact includes potential key exposure and compromised confidentiality and integrity of aff...
GHSA-GCMP-VF6V-59GG
creationtimestamp| type| source ---|---|--- 2025-04-22 17:03:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12913...
GHSA-MXR3-8WHJ-J74R Harden-Runner allows evasion of 'disable-sudo' policy
Summary Harden-Runner includes a policy option disable-sudo to prevent the GitHub Actions runner user from using sudo. This is implemented by removing the runner user from the sudoers file. However, this control can be bypassed as the runner user, being part of the docker group, can interact with...
CVE-2022-44235
creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12673...
CVE-2022-42866
creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12671...
CVE-2025-1457
creationtimestamp| type| source ---|---|--- 2025-04-19 03:59:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12561 2025-04-19 06:39:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln5jm5vbs72l 2025-04-19 06:47:28+00:00| seen|...
GHSA-GPJJ-F76M-9X3Q
creationtimestamp| type| source ---|---|--- 2025-04-18 20:59:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12538 2025-04-18 23:30:24+00:00| published-proof-of-concept| Telegram/oRg411HAomHdISM9O3TVQssrB2w8dJGX9X47vDNRx0yd1g...
CVE-2022-23507
creationtimestamp| type| source ---|---|--- 2025-04-18 16:59:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12492...
GHSA-53Q9-R3PM-6PQ6
creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12473 2025-04-18 16:27:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114359904676181462 2025-04-18 18:31:46+00:00| published-proof-of-concept|...
CVE-2025-3724
creationtimestamp| type| source ---|---|--- 2025-04-16 19:56:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12144 2025-04-17 00:26:02+00:00| seen| https://t.me/cvedetector/23184...
CVE-2025-22119
creationtimestamp| type| source ---|---|--- 2025-04-16 17:43:44+00:00| seen| https://t.me/cvedetector/23120...
CVE-2025-31200
creationtimestamp| type| source ---|---|--- 2025-04-16 17:33:02+00:00| seen| https://infosec.exchange/users/applsec/statuses/114348836934305541 2025-04-16 17:33:04+00:00| seen| https://bsky.app/profile/applsec.bsky.social/post/3lmx4qr3utx2e 2025-04-16 18:18:24+00:00| seen|...
