CVE-2025-8887

The CVE-2025-8887 issue concerns Usta Information Systems Inc. Aybs Interaktif. Affects Aybs Interaktif versions from 2024 through 28082025 and arises from an authorization bypass via user-controlled keys, leading to missing authorization and exposure of sensitive information to an unauthorized a...

CVE-2025-8886 Authorization Bypass in Usta Information Systems' Aybs Interaktif

Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass. This issue affects Aybs...

GHSA-49G5-F6QW-8MM7 vulnerabilities

Vulnerabilities for packages: python...

MAL-2025-48294 Malicious code in nf-iso-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3931e1fe9c0a20bbdeb1e532f664f5e95b84b7c831342802db5c9d74795d0c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-checkout-bricks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7a30a0c50c357c109e976dd834294a7f9414d5d0589e68deea9385dcdb6dff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-41565

Name of the Vulnerable Software and Affected Versions Aybs Interaktif versions 2024 through 28082025 Description The software exhibits flaws in permission management, potentially allowing unauthorized access to sensitive information and enabling privilege abuse and authentication bypass. This cou...

CVE-2025-11579

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

PT-2025-41566

Name of the Vulnerable Software and Affected Versions Usta Information Systems Inc. Aybs Interaktif versions 2024 through 28082025 Description An authorization bypass exists in Usta Information Systems Inc. Aybs Interaktif due to user-controlled keys, missing authorization checks, and exposure of...

MAL-2025-48267 Malicious code in react-outcome-error-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf316b6e96271df51ad30f147aa205bb372c306b2a929a854bafb68c41a5cf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bird-clean-sky-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d4690255e702b2e0003068c76afd1666551d9e315ff93105a769b6250d46469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93874ac2ce730f71836ee3bdd967cb0338d0eaacc0bcd0276266453fb3bfc69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48136 Malicious code in redirect-95fl17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e955a8cbe02f2173f17135fd31afc9d73eedf79aa1b7d79afb77f906d60f6c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48110 Malicious code in redirect-1p89nj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43688fce1f12de08acc0da78811aac96ec28e59b080c8cd03c83ca80c1b69bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-594t6h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f21526c94fe44af17a76e014ed8fd5d021d237aa02fdd4f5951a76303f1d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48149 Malicious code in redirect-cx4vm0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 885599176b7288b83170a3823028daf5aed3b54943a633f89ceb9e172fa0899a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48180 Malicious code in redirect-ksm5w7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2feba355270c24294faf83abadea29520bbb37968b5b7aed42d3c717a22846d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48235 Malicious code in redirect-ystrj5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb686c3124e1851b3eeb9b2c48defe89d5978368b71fe5e0855576605ce632da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-8f3x70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75cc50fb739d4328a1ee9c3f1a2b4fe031b53f6a6915b239eb09539463c58858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48139 Malicious code in redirect-a1jnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 144cd40316e9b75e61f4a806b5a17a3ad66d2668b1fe532dc5758a405b4cdf5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-t8kcsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d48bdc09f7a339317e5e1351a51269a2f92801fc1e6c5fa906b2bfafbb23925f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...