CVE-2025-61912

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...

MAL-2025-48305 Malicious code in tailwind-style-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 405756ca6b244b2da943e5c301d715776df3e507385f429dc2a6cf091a682931 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-8291 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-8887 IDOR in Usta Information Systems' Aybs Interaktif

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

CVE-2025-8887

The CVE-2025-8887 issue concerns Usta Information Systems Inc. Aybs Interaktif. Affects Aybs Interaktif versions from 2024 through 28082025 and arises from an authorization bypass via user-controlled keys, leading to missing authorization and exposure of sensitive information to an unauthorized a...

CVE-2025-8887 IDOR in Usta Information Systems' Aybs Interaktif

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

CVE-2025-8886 Authorization Bypass in Usta Information Systems' Aybs Interaktif

Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass. This issue affects Aybs...

GHSA-49G5-F6QW-8MM7 vulnerabilities

Vulnerabilities for packages: python...

MAL-2025-48294 Malicious code in nf-iso-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3931e1fe9c0a20bbdeb1e532f664f5e95b84b7c831342802db5c9d74795d0c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-checkout-bricks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7a30a0c50c357c109e976dd834294a7f9414d5d0589e68deea9385dcdb6dff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-41566

Name of the Vulnerable Software and Affected Versions Usta Information Systems Inc. Aybs Interaktif versions 2024 through 28082025 Description An authorization bypass exists in Usta Information Systems Inc. Aybs Interaktif due to user-controlled keys, missing authorization checks, and exposure of...

PT-2025-41565

Name of the Vulnerable Software and Affected Versions Aybs Interaktif versions 2024 through 28082025 Description The software exhibits flaws in permission management, potentially allowing unauthorized access to sensitive information and enabling privilege abuse and authentication bypass. This cou...

CVE-2025-11579

github.com/nwaples/rardecode versions =2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash...

MAL-2025-48267 Malicious code in react-outcome-error-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf316b6e96271df51ad30f147aa205bb372c306b2a929a854bafb68c41a5cf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93874ac2ce730f71836ee3bdd967cb0338d0eaacc0bcd0276266453fb3bfc69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bird-clean-sky-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d4690255e702b2e0003068c76afd1666551d9e315ff93105a769b6250d46469 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48136 Malicious code in redirect-95fl17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e955a8cbe02f2173f17135fd31afc9d73eedf79aa1b7d79afb77f906d60f6c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48110 Malicious code in redirect-1p89nj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43688fce1f12de08acc0da78811aac96ec28e59b080c8cd03c83ca80c1b69bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-594t6h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f21526c94fe44af17a76e014ed8fd5d021d237aa02fdd4f5951a76303f1d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48149 Malicious code in redirect-cx4vm0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 885599176b7288b83170a3823028daf5aed3b54943a633f89ceb9e172fa0899a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...