Malicious code in ganymede-sync-materialize-jabbah (npm)

The package ganymede-sync-materialize-jabbah was found to contain malicious code...

Malicious code in apple_portal_sync (npm)

The package appleportalsync was found to contain malicious code...

MAL-2025-34331 Malicious code in sync-sampled-reviews-with-raw-reviews (npm)

The package sync-sampled-reviews-with-raw-reviews was found to contain malicious code...

Malicious code in slate-sync (npm)

The package slate-sync was found to contain malicious code...

Malicious code in yaml-avior-sync-csrf (npm)

The package yaml-avior-sync-csrf was found to contain malicious code...

MAL-2025-21192 Malicious code in ganymede-sync-materialize-jabbah (npm)

The package ganymede-sync-materialize-jabbah was found to contain malicious code...

MAL-2025-26179 Malicious code in memoize-sync (npm)

The package memoize-sync was found to contain malicious code...

MAL-2025-34333 Malicious code in sync-superagent-forever-singularitarianism (npm)

The package sync-superagent-forever-singularitarianism was found to contain malicious code...

MAL-2025-34329 Malicious code in sync-chalk-cygnus-arcturus (npm)

The package sync-chalk-cygnus-arcturus was found to contain malicious code...

MAL-2025-34634 Malicious code in technosignature-higgs-selenology-sync (npm)

The package technosignature-higgs-selenology-sync was found to contain malicious code...

MAL-2025-23745 Malicious code in jest-sync-json-reporter (npm)

The package jest-sync-json-reporter was found to contain malicious code...

MAL-2025-25778 Malicious code in magnetosphere-tectonic-eleventy-sync (npm)

The package magnetosphere-tectonic-eleventy-sync was found to contain malicious code...

Malicious code in luminescence-ultra-transhumanism-sync (npm)

The package luminescence-ultra-transhumanism-sync was found to contain malicious code...

CVE-2025-53729

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

CVE-2025-49047

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeross DigitalOcean Spaces Sync do-spaces-sync allows Stored XSS.This issue affects DigitalOcean Spaces Sync: from n/a through = 2.2.1...

CVE-2025-49047

CVE-2025-49047 is a stored Cross-Site Scripting vulnerability in the WordPress plugin DigitalOcean Spaces Sync (versions

CVE-2025-49047 WordPress DigitalOcean Spaces Sync plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeross DigitalOcean Spaces Sync allows Stored XSS. This issue affects DigitalOcean Spaces Sync: from n/a through 2.2.1...

WordPress plugin DigitalOcean Spaces Sync 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-33180 · Digitalocean · Digitalocean Spaces Sync

Name of the Vulnerable Software and Affected Versions: DigitalOcean Spaces Sync versions through 2.2.1 Description: The software contains an improper neutralization of input during web page generation, leading to a stored cross-site scripting issue. Recommendations: Update to a version later than...

Vulnerabilities fixed in Azure products

Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities are related to improper access control mechanisms, allowing authorized attackers to perform local spoofing attacks, obtain elevated privileges, reveal sensitive information and compromise the integrity of systems. This can...