MAL-2025-3506 Malicious code in vonage-status-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ada0aade725df8ff1808b4600aaf892c84da40d29ad87d0488895e3894712c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Undertow: Infinite loop in SslConduit during close

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...

CVE-2025-46672

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...

CryptoLib security vulnerabilities

CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib versions prior to 1.3.2, which stems from a failure to check SA operational status and could lead to a bypass...

CVE-2025-46672

Summary : CVE-2025-46672 affects NASA CryptoLib up to v1.3.1 (before 1.3.2). The root cause is that the OTAR crypto function return status is not checked, which could allow incorrect handling of OTAR results and potentially enable spacecraft hijacking. Impact : the issue is described as a securit...

CVE-2025-46672

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...

CryptoLib security vulnerabilities

CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib versions prior to 1.3.2 that stems from a failure to check key status and could lead to spacecraft hijacking...

CVE-2025-3727

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component STATUS Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

Return of Wrong Status Code

Overview Affected versions of this package are vulnerable to Return of Wrong Status Code from the chacha20poly1305setkey function, when returning a ChaCha20 initialization error from the OpenSSL backend. An attacker can potentially impact confidentiality, integrity, and availability by exploiting...

CVE-2025-43862

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq76yi6e2h 2025-04-25 18:02:30+00:00| seen| Telegram/t8K1XuU9DycjdS-BJ0HBwR2vMp2ysg1gNZKK5Q0GJ-ZI8I 2025-04-25 19:11:15+00:00| seen| https://t.me/cvedetector/23768...

CVE-2025-43016

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq75y7n52v 2025-04-25 19:11:12+00:00| seen| https://t.me/cvedetector/23767...

CVE-2025-25775

creationtimestamp| type| source ---|---|--- 2025-04-25 17:07:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13468 2025-04-25 19:48:22+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114400329847987378 2025-04-25 21:19:55+00:00| seen|...

CVE-2025-3641

creationtimestamp| type| source ---|---|--- 2025-04-25 16:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114399621545979009 2025-04-25 17:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq75nzid2r 2025-04-25 18:02:30+00:00| seen|...

CVE-2025-46230

creationtimestamp| type| source ---|---|--- 2025-04-25 14:07:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13413...

CVE-2025-3867

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13388 2025-04-25 07:07:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxr2l5332 2025-04-25 10:49:33+00:00| seen|...

CVE-2025-46613

creationtimestamp| type| source ---|---|--- 2025-04-25 06:10:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13380 2025-04-25 07:07:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxtnpo7z2 2025-04-25...

CVE-2025-23245

creationtimestamp| type| source ---|---|--- 2025-04-25 03:23:17+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lnmbhiqp2k22 2025-05-01 14:15:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14297 2025-05-01 14:51:49+00:00| seen|...

CVE-2025-3645: Incorrect Authorization

A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...

CVE-2025-46420

creationtimestamp| type| source ---|---|--- 2025-04-24 13:05:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13218 2025-04-24 14:16:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnkt4xahclj2 2025-04-24 15:49:31+00:00| seen|...

CVE-2025-46273

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06 2025-04-24 23:09:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13360 2025-04-25 00:19:52+00:00| seen|...