ECHO-0EEA-D8CE-A220

Bulletin has no description...

ECHO-C940-CDC0-49CA

Bulletin has no description...

ECHO-B916-F779-8318

Bulletin has no description...

ECHO-7625-746A-0E67

Bulletin has no description...

CGA-RJGM-PR7P-XMGQ

Bulletin has no description...

CGA-673W-FXJH-QWP2

Bulletin has no description...

Malicious code in geniusbar (npm)

The package geniusbar was found to contain malicious code...

BELL-CVE-2025-21869

Bulletin has no description...

"ASM_DEP_SHARED" property is wrongly set to true when DEP shared mode is disabled

In XMS 10.15 RP6, the device property "ASMDEPSHARED" is set to "true" even if the "Shared mode" setting of your DEP account is disabled. New DEP enrollments in other 10.15 rolling patches are not impacted...

mockjs vulnerable to Prototype Pollution via the Util.extend function

All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing check if the attribute resolves to the object prototype. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, o...

Malicious Package in commandre

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...