MAL-2025-6201 Malicious code in taxify-business-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13b2c51d2f3a170b26794d81e81d10dcb0454206e4f370445eb579f358cdeba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lain-test-org/test-package2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7991201b15a132a9776af677edbd7577a27377c5d04b274757790c4a5b47d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6140 Malicious code in @lain-test-org/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3309488f91f09d6b882b6b40fb36bb02684340b4fec01bc55816876748b46941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-XQPG-92FQ-GRFG `pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write

Summary An authenticated path traversal vulnerability exists in the /json/upload endpoint of the pyLoad By manipulating the filename of an uploaded file, an attacker can traverse out of the intended upload directory, allowing them to write arbitrary files to any location on the system accessible ...

`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write

Summary An authenticated path traversal vulnerability exists in the /json/upload endpoint of the pyLoad By manipulating the filename of an uploaded file, an attacker can traverse out of the intended upload directory, allowing them to write arbitrary files to any location on the system accessible ...

Malicious code in shopify-css-import (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02612f811f0437cad89ff886ab8950df3e8e2a8ecc3c285747a833e50420ee7b Any computer that has this package installed or running should be considered...

CVE-2025-44658

In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions. An attacker may exploit this by uploading malicious scripts disguised with alternate extensions and tricking the web server into executing them ...

Malicious code in vite-lightsparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10e940b9ceb264d366ff66c1c0dcdb57cf63b7a7664ff61db7b18a4523944e4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evmlogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f613dff9c5a8240615af13856874523566cf158ec5fb8209a17f98b2359c50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

📄 Remote Mouse 3.303 Remote Code Execution

Remote Mouse version 3.303 macOS contains an unauthenticated remote code execution vulnerability. By sending crafted TCP packets that simulate keyboard input, an attacker can remotely open a terminal and execute arbitrary commands, enabling full system compromise. Exploit Title: Remote Mouse 3.30...

CVE-2025-44658

In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions. An attacker may exploit this by uploading malicious scripts disguised with alternate extensions and tricking the web server into executing them ...

CVE-2025-44658

Netgear RAX30 appears affected (version V1.0.10.94). The issue is a PHP-FPM misconfiguration that fails to limit PHP-FPM to .php extensions, allowing uploaded scripts with alternate extensions to be executed as PHP. Consequences described include remote code execution, information disclosure, or ...

PT-2025-30222

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server affected versions not specified Description The issue involves improper authentication and path traversal in Microsoft Office SharePoint Server. This allows an unauthorized attacker to perform spoofing over a...

Exploit for SQL Injection in Fortinet Fortiweb

!Book Coverhttps://m.media-amazon.com/images/I/51J88WafNFL.A...

USN-7655-1: Linux kernel (Intel IoTG) vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. CVE-2024-8805 It was discovered that the CIFS network file system...

USN-7654-3: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

USN-7654-2: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

USN-7654-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PA-RISC architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; -...

Malicious code in privmx-crypto (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 588af33eb2e6f5ec7452d71856c5f1c602724084bbae3765549330176f59eaeb Any computer that has this package installed or running should be considered...

Ubuntu 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-7653-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7653-1 advisory. It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcall...