Malicious Package

Overview MyDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlUnicorn.Core is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlUnicornCore is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation

A set of nine malicious NuGet packages has been identified as capable of dropping time-delayed payloads to sabotage database operations and corrupt industrial control systems. According to software supply chain security company Socket, the packages were published in 2023 and 2024 by a user named...

MAL-2025-49385 Malicious code in tailwindcss-gustify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1671650b65b4934845aada45f513b1bea7032ea94d90f9e1517e60bce563b621 The package tailwindcss-gustify was found to contain malicious code. Source: ghsa-malware...

CVE-2025-60542 vulnerabilities

Vulnerabilities for packages: redisinsight...

SUSE CVE-2025-62768

unknown...

QNAP Systems File Station 5 代码问题漏洞

QNAP Systems File Station 5 is a file management software from QNAP Systems. A code issue vulnerability exists in QNAP Systems File Station 5 that stems from a null pointer dereference that could lead to a denial of service attack...

QNAP Systems QuLog Center 跨站脚本漏洞

QNAP Systems QuLog Center is a report field for China-based QNAP Systems that logs events reported by the system. A cross-site scripting vulnerability exists in QNAP Systems QuLog Center version 1.8.2.923, which stems from susceptibility to cross-site scripting attacks that could result in...

The vulnerability of the NvMap component in microprogramming software for embedded AI platforms such as NVIDIA Jetson Orin Series, NVIDIA Jetson Xavier Series, NVIDIA Jetson Thor Series, and IGX Orin, which allows a hacker to trigger a service failure.

The vulnerability of the NvMap component in microprogramming software for embedded AI platforms such as NVIDIA Jetson Orin Series, NVIDIA Jetson Xavier Series, NVIDIA Jetson Thor Series, and IGX Orin is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow...

QNAP Systems File Station 5 代码问题漏洞

QNAP Systems File Station 5 is a file management software from QNAP Systems. A code issue vulnerability exists in QNAP Systems File Station 5 that stems from a null pointer dereference that could lead to a denial of service attack...

Linux Distros Unpatched Vulnerability : CVE-2025-12729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific...

Oracle Linux 10 : sssd (ELSA-2025-19851)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19851 advisory. - Resolves: RHEL-120286 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems rhel-10.0.z Tenable...

Account Takeover: What Is It and How to Fight It

Account takeover ATO attacks can devastate individuals and organisations, from personal profiles to enterprise systems. The financial impact…...

GHSA-2QFP-Q593-8484 vulnerabilities

Vulnerabilities for packages: superset, pgadmin4, mitmproxy, nemo...

USN-7835-5 linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...

CVE-2025-59171

creationtimestamp| type| source ---|---|--- 2025-11-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01 2025-11-07 00:42:15+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4ytslb4bua2 2025-11-07 02:38:12+00:00| seen|...

ABB FLXeon Controllers

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to take remote control of the product, insert and run arbitrary code, and crash the device being accessed. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...