PT-2025-11096 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability exists in the Command Line Interface CLI of Cisco IOS XR Software due to insufficient validation of user-supplied arguments passed to specific CLI commands. Th...

PT-2025-11125

Name of the Vulnerable Software and Affected Versions LLM-Claw versions 0.1.0 through 0.1.1a-p1 Description A security flaw exists in LLM-Claw, specifically within the agent deploy init function located in the /agents/deploy/initiate.c file of the Agent Deployment component. This issue is a buffe...

Malicious code in gh-node-module-generatebom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a04173cc21773450d4bd86768588db1893acb72fbc0336681a1370f3c7e8e781 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bastion-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b653fe85132d2b38f6455a8b98a9d59deccd8982eaf7c9e13d97d1037dbc6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www-discoveryeducation-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81d0d31dd0c1ad59b382392dd3309ca9d6ca9ccafde5ab54ee3c7a4c38fb20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rexz-imagine-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5880974c43ddaa1e24f3eecce7e9eb1e66d31adb347a095436a27316c30097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2279 Malicious code in rexz-nsfw-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f31922f88308b517c097c8e5d128be0f383ac6cb28abd2143e7dd9f6f21b0af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angularonlineauthclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e5f25e1cac80da371793d8ae6bcabf3edb1c742f67871b9777db35c9b7a078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in radar-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e3c3b76c65176007f3c376c09b22d085bc9fba8527c7b806acca53816e6cebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in radiodesign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 775f28e856effe54ed28dbf3c4c4fec2fc610f913cbd109753da235fe86601b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in psd2-registration-example-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25af145935a5862c0a59e1214fee5a5bac0c1a1a7dab55da992f29b8bfa68131 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in relay-prototyping-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4755f649ce600841398c2b1dc4307b25489b71cb35ff35c8cd5be5dcac90bae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in example-nodejs-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb2351b3777bfaea370237b22b5155a53e293162cb01bca791717b05107a4b7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2276 Malicious code in relay-prototyping-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4755f649ce600841398c2b1dc4307b25489b71cb35ff35c8cd5be5dcac90bae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2271 Malicious code in psd2-registration-example-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25af145935a5862c0a59e1214fee5a5bac0c1a1a7dab55da992f29b8bfa68131 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2250 Malicious code in custom-networking-behavior (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dedb90c1c56915749973ff86ebfc51df188796ca9c8ca7a27e30a0434d19c9ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24080 Microsoft Office Remote Code Execution Vulnerability

...

USN-7344-1: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

CVE-2024-50394 Helpdesk

An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: Helpdesk 3.3.3 and later...

Malicious code in next-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cabe10794524f4f4cd9eaef39f3eb0a9ac3a110d7d5d5c4f58ff804630ec097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...