MAL-2025-2786 Malicious code in shipmenttrackingserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3a2c25dd8f797d3e201b38a02fde72e265a03a3528d4af7d6bdce2f4b4142e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2740 Malicious code in @takamol/qiwa-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7ba01a4644646c8bbbd516eff9a3c51df7457629561f446c37ab76f428bf6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OneNav 安全漏洞

OneNav is a bookmark management tool from OneNav, Inc. A security vulnerability exists in OneNav version 1.1.0, which originates from cross-site scripting in customized headers...

OneNav 安全漏洞

OneNav is a bookmark management tool from OneNav, Inc. A security vulnerability exists in OneNav version 1.1.0 that stems from a server-side request forgery in a customized header...

MeetMe 安全漏洞

MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in versions prior to MeetMe 2024-09, which stems from a call forwarding configuration module credential disclosure that could allow access to critical assets via configuration files...

ShopXO 安全漏洞

ShopXO is an open source enterprise-grade open source e-commerce system from ShopXO Inc. A security vulnerability exists in ShopXO version v6.4.0, which originates from server-side request forgery in email settings...

ring 安全漏洞

ring is a library by Brian Smith, a personal developer. This CVE number has been withdrawn...

tushuguanlixitong 安全漏洞

tushuguanlixitong book management system is a book management system by the individual developer of China Mingyuefusu 明月复苏. A security vulnerability exists in tushuguanlixitong, which stems from certain unknown processing that could lead to cross-site request forgery...

HTCondor 安全漏洞

HTCondor is a workload management system at the University of Wisconsin-Madison UW-Madison. The system provides job queuing mechanisms, scheduling policies, prioritization schemes, resource monitoring and resource management. A security vulnerability exists in HTCondor that stems from an...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner by an individual developer in Hayden, USA. A security vulnerability exists in Mealie v2.2.0 that stems from improper object-level authorization...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner by an individual developer in Hayden, USA. A security vulnerability exists in Mealie v2.2.0 that stems from improper object-level authorization...

Vega 安全漏洞

Vega is a Javscript-based software from the Vega team that can be used to create interactive visual displays. The software can describe data visualizations using JSON format and generate interactive views using HTML5 Canvas or SVG. A security vulnerability exists in Vega versions prior to 5.32.0...

Appsmith 安全漏洞

Appsmith is an open source platform for building, deploying, and maintaining internal applications from Appsmith Open Source. A security vulnerability exists in Appsmith versions prior to 1.51 that stems from improper access control and could lead to information disclosure...

MAL-2025-2647 Malicious code in blockzie-blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da1a7f59cd66ecf84dc953f33def62ebeb1b32c0d526a2d32b361b967d20dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys, Inc. A security vulnerability exists in Linksys E5600 version V1.1.0.26, which originates from a command injection vulnerability in the ptemail parameter in the runtime.emailReg function...

LocalAI 安全漏洞

LocalAI is a free, open source alternative to OpenAI from the individual developer Ettore Di Giacinto. A security vulnerability exists in LocalAI version v2.21.1, which stems from improper user input cleanup in the search function and could lead to a cross-site scripting attack...

H2O 安全漏洞

H2O is an in-memory platform for distributed, scalable machine learning open-sourced by H2O.ai. A security vulnerability exists in H2O version 3.46.0 that stems from the exportModelDetails function not validating user-controllable parameters, which could lead to arbitrary file overwrites...

H2O 安全漏洞

H2O is an in-memory platform for distributed, scalable machine learning open-sourced by H2O.ai. A security vulnerability exists in H2O version 3.46.0, which stems from a custom encryption tool endpoint that does not restrict encrypted files, potentially leading to ransomware behavior...

Danswer 安全漏洞

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. Danswer suffers from a security vulnerability that stems from an arbitrary file overwrite that could lead to file system tampering...

WhatsApp 安全漏洞

WhatsApp is a suite of mobile applications from WhatsApp, an American company that uses the Internet to transmit text messages. The application uses contact information in a smartphone to find contacts using the software to transmit text, images, and more. A security vulnerability exists in...