MAL-2025-1125 Malicious code in gateway-hsm-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0749bb94e6b7e493b7f25152e4ebfc6d99b6e4e59fe32b075860382d66089417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22605 Coolify OS Command Injection Vulnerability in SSH Command Generation

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Starting in version 4.0.0-beta.18 and prior to 4.0.0-beta.253, a vulnerability in the execution of commands on remote servers allows an authenticated user to execute arbitrary code on the local...

DLA-4008-1 linux-6.1 - security update

Bulletin has no description...

BIT-NODE-MIN-2023-38552

When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node's policy implementation, thus effectively disabling the integrity check. Impacts: This vulnerability affects all user...

FreeBSD : chromium -- multiple security fixes (3d5b7860-48ad-48c2-aa36-601b8ab9cc43)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3d5b7860-48ad-48c2-aa36-601b8ab9cc43 advisory. Chrome Releases reports: This update includes 4 security fixes: Tenable has extracted the preceding...

MAL-2024-11503 Malicious code in wynn-and-encore (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11496 Malicious code in widget-session-sample (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11490 Malicious code in vulnerabledriver (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11489 Malicious code in vue3-tiktok (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11443 Malicious code in sdk-interface (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11404 Malicious code in nezur (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11353 Malicious code in evocater_libpnpmpublic (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11332 Malicious code in compilre (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11307 Malicious code in autoball (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-987 Malicious code in shoots-flutter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6a612693cb09ca6ca66ccd908b99293ec9ade7b7a719b78f0743332cba338071 Importing the module triggers sending out the hostname to the package author. It looks to be a placeholder/pentest activity related to BytedDance. --- Category...

MAL-2024-11637 Malicious code in monoliht (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b0594d4897f61df4c3fce7993c0b5070f13b76f785a7a964bff40e65b566bfd5 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

GHSA-P72W-R6FV-6G5H vulnerabilities

Vulnerabilities for packages: druid...

RHSA-2017:3452 Red Hat Security Advisory: rh-java-common-lucene5 security update

Bulletin has no description...

RHSA-2015:1044 Red Hat Security Advisory: virtio-win security and bug fix update

Bulletin has no description...

RHSA-2013:1441 Red Hat Security Advisory: rubygems security update

Bulletin has no description...