MAL-2025-4032 Malicious code in valdatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68f4565e0cc0a62335e888be0acb41be1c47165a7d0a4e1482a34715864deea3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4024 Malicious code in social-network-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89279e5bb7b18cd7f18b0018f976d1e055fbeb331245019a6c3e75796c3bf1e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4905 iop-apl-uw basestation3 QC.py load_qc_pickl deserialization

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

CVE-2024-55063

Multiple Code Injection vulnerabilities in EasyVirt DC NetScope = 8.7.0 allows remote authenticated attackers to execute arbitrary code via the 1 lang parameter to /international/keyboard/options; the 2 keyboardlayout or 3 keyboardvariant parameter to /international/settings/keyboard; the 4...

Ubuntu: Security Advisory (USN-7510-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-21975 · Unknown · Woocommerce

Name of the Vulnerable Software and Affected Versions: Product Code for WooCommerce versions 1.5.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing unintended...

CGA-J53W-6WGV-HFW4

Bulletin has no description...

MAL-2025-3937 Malicious code in node-scoped-http-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 881ef5215aabb6e0d9dbaf7bbbdc6f804c031cb613c83b6fdb86f0efbc99d520 The OpenSSF Package Analysis project identified 'node-scoped-http-client' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-5105 Malicious code in coloramapkgsw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d3b0703e237935a2a53d99b6e3ad717e1e604c218e5e21c97773615373adea16 Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-5118 Malicious code in m5tlnyakblwa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a3cc4be569e877aa213b4747e6285f9d2d46f68ee93d55ec9fddf7949c15ff94 Importing the module starts download and running a remote executable, identified as malware by AVs --- Category: MALICIOUS - The campaign has clearly malicious...

CGA-J2FR-6C3H-JJXH

Bulletin has no description...

CGA-2MM6-RQ4H-W39R

Bulletin has no description...

CGA-HGR5-MG3G-PRJQ

Bulletin has no description...

WordPress Ninja Tables Pro plugin <= 5.0.17 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ninja Tables Pro versions = 5.0.17...

MAL-2025-5136 Malicious code in solana-coin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa4c17031f4a667cddae42a648aa66edf30f498296c451a2c0637082772dbcef Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

CGA-28HM-R43X-HGXM

Bulletin has no description...

WordPress Broadstreet plugin <= 1.51.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by kmaron1n in WordPress Plugin Broadstreet Ads versions = 1.51.2...

MAL-2025-3915 Malicious code in rollup-plugin-remove-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 230bae792624cf6834a21e884402488ab15faca4797c79b7312463de4faf0593 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3878 Malicious code in com.meta.xr.sdk.avatars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2819b05ade219214d57904bac7d545f37b68824e1a40e52668c7b6751d543c49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3895 Malicious code in interaction-tracing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df3c2eb4540cdd7edb46dc3730a71a443bd1e3e63771f8046407a7f1d3c44e52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...