CVE-2025-54390

Zimbra Collaboration (ZCS) CVE-2025-54390 is a CSRF in ResetPasswordRequest when zimbraFeatureResetPasswordStatus is enabled. An attacker can trick an authenticated user into visiting a malicious page that silently sends a crafted SOAP request to reset the user’s password due to missing CSRF toke...

PT-2025-38678

Name of the Vulnerable Software and Affected Versions D-Link DCS-935L versions prior to 1.13.01 Description A stack-based buffer overflow issue exists in the sub 402280 function of the /HNAP1/ file. The issue is due to the manipulation of the HNAP AUTH/SOAPAction argument, which can allow a remot...

Malicious code in janus-vuepress-arcturus-soap (npm)

The package janus-vuepress-arcturus-soap was found to contain malicious code...

Malicious code in quark-markdown-soap-jekyll (npm)

The package quark-markdown-soap-jekyll was found to contain malicious code...

Malicious code in soap-socketio-taurus-async (npm)

The package soap-socketio-taurus-async was found to contain malicious code...

Malicious code in rollup-janus-dotenv-soap (npm)

The package rollup-janus-dotenv-soap was found to contain malicious code...

MAL-2025-44759 Malicious code in janus-vuepress-arcturus-soap (npm)

The package janus-vuepress-arcturus-soap was found to contain malicious code...

MAL-2025-44647 Malicious code in hugo-xenos-soap-deneb (npm)

The package hugo-xenos-soap-deneb was found to contain malicious code...

MAL-2025-45901 Malicious code in rollup-janus-dotenv-soap (npm)

The package rollup-janus-dotenv-soap was found to contain malicious code...

Malicious code in soap-commitlint-config-angular-adonis-cors (npm)

The package soap-commitlint-config-angular-adonis-cors was found to contain malicious code...

Malicious code in antares-native-ablation-soap (npm)

The package antares-native-ablation-soap was found to contain malicious code...

MAL-2025-44230 Malicious code in farout-adonis-tool-soap (npm)

The package farout-adonis-tool-soap was found to contain malicious code...

MAL-2025-46239 Malicious code in tardigrade-kinetic-soap-cassini (npm)

The package tardigrade-kinetic-soap-cassini was found to contain malicious code...

MAL-2025-46099 Malicious code in soap-commitlint-config-angular-adonis-cors (npm)

The package soap-commitlint-config-angular-adonis-cors was found to contain malicious code...

MAL-2025-45720 Malicious code in quark-markdown-soap-jekyll (npm)

The package quark-markdown-soap-jekyll was found to contain malicious code...

MAL-2025-43451 Malicious code in antares-native-ablation-soap (npm)

The package antares-native-ablation-soap was found to contain malicious code...

MAL-2025-45203 Malicious code in miranda-soap-loopback-nightmare (npm)

The package miranda-soap-loopback-nightmare was found to contain malicious code...

Malicious code in soap-pegasus-prettier-stylelint-duplex (npm)

The package soap-pegasus-prettier-stylelint-duplex was found to contain malicious code...

Malicious code in farout-adonis-tool-soap (npm)

The package farout-adonis-tool-soap was found to contain malicious code...

Malicious code in tardigrade-kinetic-soap-cassini (npm)

The package tardigrade-kinetic-soap-cassini was found to contain malicious code...