Malicious code in fatfingers-hahayeet3333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b4086e35c75abc0351d990cbb4263a2e74284ca59bde975e0963623bf0a6b0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3241 Malicious code in fatfingers-hahayeet2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b265d0af53100351e857e7122941420f14f207de723371c198bb1a273358c2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3244 Malicious code in fatfingers-hahayeet333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5247d3c082d84b031145add7682e515a39d31412e45c6cd934738dc05ee86f9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3245 Malicious code in fatfingers-hahayeet3333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b4086e35c75abc0351d990cbb4263a2e74284ca59bde975e0963623bf0a6b0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hahayeet333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5247d3c082d84b031145add7682e515a39d31412e45c6cd934738dc05ee86f9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-datepickeroptions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863302cb49601a697c0ab1dacb7cc78b529ff2a24b8185ceb782a5a48c10248c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3230 Malicious code in airbnb-embed-frame (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 376bf68663b9b18092bb92b3b07313218798ff34c1a714d205121ac55072e1ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3236 Malicious code in eco-solver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a8f7c5551c322952642a4ae7cfaa02b59bd51fd08667100bbcf22cda084b0e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3237 Malicious code in eigenlayer-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dcbc6398c70af4eea7bcb6879aced4ed322d24aa860eff099e1054163764f2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3227 Malicious code in @x-mlbtv/client-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88def9d7e31808e260a5f82c41a69f93b73929927370a5fbf3821cbdfb2d5103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3224 Malicious code in @bane-mlb/less-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708683cc4aa7a9a8a3e4e44563d46dd000b74ea5738e4aa8885e7f40e6990a53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bane-mlb/less-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708683cc4aa7a9a8a3e4e44563d46dd000b74ea5738e4aa8885e7f40e6990a53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-17246 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.18 Description: A Remote Code Execution RCE vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionalit...

ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal

Exploit Title: ABB Cylon Aspect 3.08.02 ethernetUpdate.php - Authenticated Path Traversal Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.02 Summary: ASPECT is an award-winning scalable...

ROS-20250417-10

Vulnerability in Mozilla Firefox, Firefox ESR browsers and Thunderbird email client of operating systems Windows is related to a post-release usage error in XSLTProcessor. Exploitation of the vulnerability could allow an attacker acting remotely to compromise a vulnerable system...

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed multiple vulnerabilities in several products, including the Utilities Application Framework, WebLogic Server, and Fusion Middleware. The vulnerabilities allow unauthenticated malicious actors to gain access to critical data, cause denial-of-service DoS, and in some cases even gai...

MAL-2025-3214 Malicious code in @csds-web-components/csds-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae5a6c41775270cbe4eca04b93c31d39f47688db4b549ea73fed1157bf612c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ABB CoreSense HM and CoreSense M10

SUMMARY An update is available that resolves vulnerability in the product versions listed as affected in this advisory. A path traversal vulnerability in these products can allow unauthenticated users to gain access to restricted directories. Exploiting this vulnerability can lead to complete...

Siemens RUGGEDCOM APE1808 Multiple Vulnerabilities in Fortigate NGFW

The RUGGEDCOM APE1808 is a powerful utility-grade application hosting platform that allows you to deploy a range of commercial applications for edge computing and network security in harsh industrial environments. Siemens RUGGEDCOM APE1808 Fortigate NGFW has multiple vulnerabilities that can be...

Malicious code in flex-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004deff66b34b25158642a09f2766c44910f05ec7a322c2933f768f34249151b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...