13073 matches found
MAL-2025-5003 Malicious code in odyssee_teams_api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9634a76d594664463c45445417dd33af9980310ff86b362704e5b0b50daed079 Any computer that has this package installed or running should be considered...
CGA-MP37-5868-VWFW
Bulletin has no description...
PYSEC-2025-64
A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...
MAL-2025-6598 Malicious code in syscachelib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c8aa87f03342830d082dcfd87dfce0528b19781902f9c9e56a7379046d8a1572 Importing the module starts a UAC bypass through fodhelper to run a privileged shell, and download and execute a remote file. --- Category: MALICIOUS - The...
MAL-2025-5333 Malicious code in @zyp3_/api-ecom-errors (npm)
The package contains code that makes a suspicious HTTP request to an OAST domain, suggesting data exfiltration or unauthorized tracking. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3906662b72961a45e2a5f250c4204f6ae4c310f177e6e8dfaa97db0a1566b188 Any computer tha...
ALSA-2025:9145 Moderate: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the...
ALSA-2025:9166 Important: apache-commons-beanutils security update
The Apache Commons BeanUtils library provides utility methods for accessing and modifying properties of arbitrary JavaBeans. Security Fixes: commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 For more detai...
MINI-66GR-6534-9H5F
Bulletin has no description...
MINI-MJ55-WFJ5-5MXJ
Bulletin has no description...
MINI-WR5Q-PX74-PVPH
Bulletin has no description...
MINI-QG73-HQVM-HVRG
Bulletin has no description...
MINI-JJM4-F5C4-CM2F
Bulletin has no description...
CVE-2025-48988 Apache Tomcat: FileUpload large number of parts with headers DoS
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be...
RHSA-2025:9075 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2025:9072 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2025:9064 Red Hat Security Advisory: podman security update
Bulletin has no description...
CGA-XRHW-9JFM-9J4V
Bulletin has no description...
CGA-VFJP-QH5C-6HVF
Bulletin has no description...