MINI-7H48-XF4J-6434

Bulletin has no description...

MINI-6V6J-9RFF-R8FG

Bulletin has no description...

MINI-4445-G433-RHJ9

Bulletin has no description...

MAL-2025-6092 Malicious code in grammarly-editor-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f24713f82fc90957a8e5834da2735094adc919b65b81f569360b9b8b1c284873 Any computer that has this package installed or running should be considered...

MAL-2025-6076 Malicious code in chime-ci-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 280ad6fead53ce916eb475c521931d23da0e7ef62e5a88845facf02492123707 Any computer that has this package installed or running should be considered...

MAL-2025-6079 Malicious code in chime-secrets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cc6774ae4b544c6fe8a12fa6caac614e90dfc3e22551bd45e7e2ab1ec60bbfe Any computer that has this package installed or running should be considered...

MAL-2025-6078 Malicious code in chime-core-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb533ce212898abdb893a38eb8ade78a5a77d62616bb84b5e0cf00f93ffec6de Any computer that has this package installed or running should be considered...

CVE-2025-4285

CVE-2025-4285 is a SQL Injection vulnerability in Rolantis Information Technologies Agentis prior to version 4.32. The issue arises from improper neutralization of special elements in SQL commands, enabling an attacker to potentially perform unauthorized database operations. Impacted software is ...

MINI-V6PX-HWQC-J5RM

Bulletin has no description...

MINI-CRRJ-58Q2-4QP4

Bulletin has no description...

MINI-X2RC-MR9J-9226

Bulletin has no description...

MINI-MVMP-CV59-J65Q

Bulletin has no description...

Malicious code in is (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a1baf574e6278b3c20c30fdd7875414ed04c1a695eb226fd43328004c6916873 "is" had unauthorized new versions published that contained malicious obfuscated code via account compromise...

MAL-2025-6020 Malicious code in is (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a1baf574e6278b3c20c30fdd7875414ed04c1a695eb226fd43328004c6916873 "is" had unauthorized new versions published that contained malicious obfuscated code via account compromise...

BELL-CVE-2025-38351

Bulletin has no description...

BIT-GRAFANA-2025-3415

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01,...

MAL-2025-6177 Malicious code in lint-pr-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a7398205d96f4d045fedf2fbd41ba545c40048a2e9683747ab8bec7ac77a1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Roundcube: Multiple Vulnerabilities

Background Free and open source webmail software for the masses, written in PHP. Description Multiple vulnerabilities have been discovered in Roundcube. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround Ther...

PT-2025-30465

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: A remote code execution issue exists due to an uninitialized variable during AR file parsing. Recommendations: At the moment, there is no information about a newer version that...

WordPress Ebook Store plugin <= 5.8012 - Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Order Details vulnerability discovered by Bee in WordPress Plugin Ebook Store versions = 5.8012...