Malicious code in alface (npm)

The package alface was found to contain malicious code...

Malicious code in zucchini-golf-ewwm (npm)

The package zucchini-golf-ewwm was found to contain malicious code...

Malicious code in @zalastax/nolb-discoh (npm)

The package @zalastax/nolb-discoh was found to contain malicious code...

Malicious code in @zalastax/nolb-bul (npm)

The package @zalastax/nolb-bul was found to contain malicious code...

Malicious code in react-scripts-cep (npm)

The package react-scripts-cep was found to contain malicious code...

Malicious code in heather_9km8u_9mvz3_jigsaw (npm)

The package heather9km8u9mvz3jigsaw was found to contain malicious code...

Malicious code in bravo-rbl-project (npm)

The package bravo-rbl-project was found to contain malicious code...

Malicious code in prairie-amber-akt949-project (npm)

The package prairie-amber-akt949-project was found to contain malicious code...

Malicious code in turkish-alphabet (npm)

The package turkish-alphabet was found to contain malicious code...

Malicious code in capops (npm)

The package capops was found to contain malicious code...

MAL-2025-40808 Malicious code in zendesk-sell-for-zapier (npm)

The package zendesk-sell-for-zapier was found to contain malicious code...

Malicious code in byted-pgc-admin-form (npm)

The package byted-pgc-admin-form was found to contain malicious code...

MINI-WJQJ-5W2J-R7W8

Bulletin has no description...

PT-2025-33152 · Unknown · Beeteam368 Extensions

Name of the Vulnerable Software and Affected Versions: BeeTeam368 Extensions versions through 1.9.4 Description: BeeTeam368 Extensions is susceptible to a PHP Local File Inclusion due to an Improper Control of Filename for Include/Require Statement. This allows for the inclusion of local files...

PT-2025-33389 · Unknown · Shahjada Wpdm – Premium Packages

Name of the Vulnerable Software and Affected Versions: Shahjada WPDM – Premium Packages versions through 6.0.2 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users. Recommendations: Update Shahja...

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-8908 Shanghai Lingdang Information Technology Lingdang CRM event.php sql injection

A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinApp/yunzhijia/event.php. The manipulation of the argument openid leads to sql injection. The attack may be launched...

CGA-9XPV-MGHP-WMCX

Bulletin has no description...

OSV-2025-619 Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437537868 Crash type: Heap-buffer-overflow READ 1 Crash state: webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree...

Intel RealSense Dynamic Calibrator 代码问题漏洞

Intel RealSense Dynamic Calibrator is a software for optimizing and fine-tuning the depth and image quality of a camera from Intel Corporation USA. A code issue vulnerability exists in Intel RealSense Dynamic Calibrator versions prior to 2.14.2.0, which stems from an uncontrolled search path that...