178 matches found
MAL-2025-4185 Malicious code in matter_build_action (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4263 Malicious code in web3-checksumm (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4236 Malicious code in pythonbitcoinlib (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-5130 Malicious code in rich-figlet (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b97458c87c8580a9cb2f2edc0af2ae40a36489dafa860102eee0307256cb416b Malicious clone of pyfiglet. Importing the package starts a series of downloading and executing of obfuscated malicious scripts, partially identified by AVs. -...
CVE-2025-4648 A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.
The content of a SVG file, received as input in Centreon web, was not properly checked. Allows Reflected XSS. A user with elevated privileges can inject JS script by altering the content of a SVG media, during the submit request. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0...
MAL-2025-3760 Malicious code in dependencyconfusion6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde19a45f6be5b0f2c1ffc00fb381166f7ec0cbb3d1df2ba0d3e169faedcd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Kibana 7.17.x < 7.17.19 / 8.0.x < 8.13.0 File Upload (ESA-2024-47)
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...
MAL-2025-4251 Malicious code in veriftest1asdla (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e04795c3a8f7fae13a125bde307aa64db04ae9f4ff76bd1d11fb32b4d3f57a36 During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
CVE-2025-25016
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
BIT-KIBANA-2025-25016 Kibana Unrestricted Upload of File
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
CVE-2025-25016
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
CVE-2025-25016 Kibana Unrestricted Upload of File
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
CVE-2025-25016
CVE-2025-25016: Kibana suffers an Unrestricted File Upload weakness due to insufficient server-side validation, allowing an authenticated attacker to compromise software integrity by uploading a crafted file. Affected versions include Kibana 7.17.x before 7.17.19 and 8.0.x before 8.13.0. The issu...
CVE-2025-25016 Kibana Unrestricted Upload of File
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
CVE-2025-25016: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
MAL-2025-3396 Malicious code in editor-inscriptions (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3383 Malicious code in chii-public (npm)
--- -= Per source details. Do not edit below this line.=-...
GO-2025-3633 GoBGP does not verify that the input length in github.com/osrg/gobgp
GoBGP does not verify that the input length in github.com/osrg/gobgp...