MAL-2025-2729 Malicious code in nylas-apex-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86275583c18eae2d336cf927f8e7a3a259fa70c98e0316305e579a4e6d11352e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2025:3208 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2025:3185 Red Hat Security Advisory: gvisor-tap-vsock security update

Bulletin has no description...

RHSA-2025:3165 Red Hat Security Advisory: podman security update

Bulletin has no description...

DLA-4092-1 libcap2 - security update

Bulletin has no description...

ALSA-2025:3261 Moderate: nginx:1.22 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 For more details about the security issues, including the impact, a...

ALSA-2025:3262 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: specially crafted MP4 file may cause denial of service CVE-2024-7347 For more details about the security issues, including the impact, a...

CVE-2024-55965

An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development information of a workspace specifically, a list of datasources in a workspace they're a member of. This information disclosure does not expose sensitive data in the datasources,...

MAL-2025-3462 Malicious code in quicolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4b11a81f135d7d2ac414b7144af73523d15db7b0ce1a2757ba6ba95f50bf0be8 Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...

MAL-2025-2660 Malicious code in consolidate-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab51d3f2f1f669e9f16db54bd9c1699dcc1dfa4e1f6c8f9b6dfa0174b331f3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2635 Malicious code in @sensort/mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfb2a761e35021c8cfca9951c826bdeb679e0667dae74308df6d84a5f3c10bbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2667 Malicious code in elm-lang-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82a505ffba5199b772a4cba7d59e99f33bf645f034a148ed9b248d308c49b82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2630 Malicious code in @ofjaaah/jose2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebd3f76646b8605352a4f16ce597be1bc5465c4fe3856d9a333b5975d8a0f4a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-8314

creationtimestamp| type| source ---|---|--- 2025-03-25 06:56:56+00:00| seen| https://t.me/cvedetector/21037 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-05...

CVE-2025-30741

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance...

PT-2025-12770 · Zhijiantianya · Ruoyi-Vue-Pro

Name of the Vulnerable Software and Affected Versions: zhijiantianya ruoyi-vue-pro version 2.4.1 Description: A problematic issue has been found in the Material Upload Interface component, affecting the processing of the file /admin-api/mp/material/upload-temporary. The manipulation of the File...

MAL-2025-3432 Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e88e848094db2d7414ceaf71a5a332701df9a17b145c137f0f5df76503847f90 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3433 Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e1532a9577dc6edfd513dfbb1f189bc4cd08297e76c1f93bb2bf25ceaa210618 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3484 Malicious code in yolov8mini (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a9222d20b84ed716d5bdf81f1da1d0f088fc7482894c8f25a5d1f757cc477ba9 On importing the module, there is an automated start of a Telegram bot capable of exfiltrating passwords from browsers, executing arbitrary commands and so on...

RHSA-2025:3094 Red Hat Security Advisory: kpatch-patch-4_18_0-477_43_1, kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, and kpatch-patch-4_18_0-477_89_1 security update

Bulletin has no description...