Malicious code in tsconfig-stitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604460d36ae1ce56e73af1b1e087dca00ef2117ca7c22a6556637effff2750c9 The package tsconfig-stitch was found to contain malicious code. Source: ghsa-malware 16b55e32e715af39ca0c84de2ae4b33de360bdbe4f7448a6eb78385de90fdb9...

Malicious Package

Overview stitch-ui-toolbox is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-200050

Malicious code in mongodb-stitch-server-testutils npm...

Malicious code in mongodb-stitch-server-testutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d66acdf1a1a865257cb91b34cf535addabd337679e38741e5f0c1f89aa0b9b The package mongodb-stitch-server-testutils was found to contain malicious code...

MAL-2025-191519 Malicious code in mongodb-stitch-server-testutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d66acdf1a1a865257cb91b34cf535addabd337679e38741e5f0c1f89aa0b9b The package mongodb-stitch-server-testutils was found to contain malicious code...

EUVD-2025-32109

Malicious code in bioql PyPI...

CVE-2025-22862

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their...

CVE-2025-22862

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their...

CVE-2025-22862

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their...

CVE-2025-22862

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their...

CVE-2025-22862

Fortinet CVE-2025-22862 affects FortiOS (versions 7.4.0–7.4.7, 7.2.0–7.2.11, 7.0.6+; FortiProxy 7.6.0–7.6.2, 7.4.0–7.4.8, 7.2 all versions, 7.0.5+) and enables an authenticated attacker to elevate privileges by triggering a malicious Webhook action in the Automation Stitch component. Root cause i...

CVE-2025-22862

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their...

CVE-2025-22862: Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their...

Malicious code in mongodb-stitch-core-admin-client (npm)

The package mongodb-stitch-core-admin-client was found to contain malicious code...

MAL-2025-26639 Malicious code in mongodb-stitch-core-admin-client (npm)

The package mongodb-stitch-core-admin-client was found to contain malicious code...

Automation Stitch Authentication Bypass Privilege Escalation

The vulnerability of the Automation Stitch component in FortiOS operating systems and FortiProxy proxy servers relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process a...

Fortinet Fortigate Privilege escalation in automation-stitch (FG-IR-24-385)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-385 advisory. - AnAuthentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 in FortiOS and FortiProxy may allow an...

Privilege escalation in automation-stitch

...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating systems dedicated to the FortiGate network security platform from the U.S. company Fiat Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A securit...

Malicious code in stitch-ui-toolbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8c164c3cf7998ef763616f524ca40c36a007e570d7c43c1ee9bff41689d29cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...