MAL-2025-6278 Malicious code in binance-internals (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6306 Malicious code in retirejs (npm)

The package communicates with a domain associated with malicious activity...

CGA-HC2M-XW7C-3WR5

Bulletin has no description...

CGA-MP9R-PQ3P-Q3QC

Bulletin has no description...

MAL-2025-6317 Malicious code in testandooteste (npm)

The package communicates with a domain associated with malicious activity...

PT-2025-30664

Name of the Vulnerable Software and Affected Versions Bayraktar Solar Energies ScadaWatt Otopilot versions prior to 27.05.2025 Description A SQL Injection issue exists in Bayraktar Solar Energies ScadaWatt Otopilot. The vulnerability is due to improper neutralization of special elements used in a...

CGA-9M6X-QCRX-9XFJ

Bulletin has no description...

CVE-2025-54377 Roo Code Lacks Line Break Validation in its Command Execution Tool

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.23.18 and below, RooCode does not validate line breaks \n in its command input, allowing potential bypass of the allow-list mechanism. The project appears to lack parsing or validation logic to prevent...

CGA-X38X-69C3-6J9R

Bulletin has no description...

CGA-3RWG-FQJ7-R7CF

Bulletin has no description...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service under specific conditions (CVE-2024-52903)

Summary IBM® Db2® is vulnerable to a denial of service under specific conditions with a specially crafted query. Vulnerability Details CVEID:CVE-2024-52903 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to a denial of service as the server may crash und...

MAL-2025-6276 Malicious code in askama (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6315 Malicious code in teamstelemetry (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7838b0f51882af6cd99758551eec942e5c2abcd214ebe7c1e8b3c59dbece4224 The OpenSSF Package Analysis project identified 'teamstelemetry' @...

WordPress Video Blogster Lite plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Video Blogster Lite versions = 1.2...

CGA-JRQ2-5GWM-H946

Bulletin has no description...

SQL Injection

github.com/uptrace/bun is vulnerable to SQL injection. The vulnerability is due to improper handling of SQL arguments in the appendArg function in /pgdriver/format.go, which allows an attacker to inject arbitrary SQL commands...

BELL-CVE-2025-38352

Bulletin has no description...

CVE-2025-54453

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...

MAL-2025-6269 Malicious code in @wptv/player (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6295 Malicious code in mv-fe-scss (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c1a1d9e0905804668e279f144472abeac638dc18ec3c4cdf519de71d9ddbe73 Any computer that has this package installed or running should be considered...