@nocobase/devtools (>=2.0.0-alpha.2, <=2.0.0-alpha.51), @nocobase/server (>=2.0.0-alpha.2, <=2.0.0-alpha.51) +1 more potentially affected by CVE-2025-13877 via @nocobase/auth (>=2.0.0-alpha.2, <=2.0.0-alpha.51)

@nocobase/auth NPM version =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.0.0-alpha.51 Source cves: CVE-2025-13877 Source advisory: MEND:CVE-2025-13877...

@nocobase/devtools (>=1.9.0, <=1.9.22), @nocobase/server (>=1.9.0, <=1.9.22) +1 more potentially affected by CVE-2025-13877 via @nocobase/auth (>=1.9.0, <=1.9.22)

@nocobase/auth NPM version =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.22 Source cves: CVE-2025-13877 Source advisory: MEND:CVE-2025-13877...

CVE-2020-36872

BACnet Test Server versions up to and including 1.01 contains a remote denial of service vulnerability in its BACnet/IP BVLC packet handling. The server fails to properly validate the BVLC Length field in incoming UDP BVLC frames on the default BACnet port 47808/udp. A remote unauthenticated...

EUVD-2025-200182

Malicious code in wfui-test-e2e npm...

Malicious code in wfui-test-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560542e2d2fa22d83add8cd46675e252d841fe3b08edfd847677a98547e86a7 The package wfui-test-e2e was found to contain malicious code. Source: ghsa-malware 3440ad1d2e090dbea33cc7a6b8e4cda047b6e20b31fc8bbd3d9e13b1f1758c56...

MAL-2025-191545 Malicious code in wfui-test-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560542e2d2fa22d83add8cd46675e252d841fe3b08edfd847677a98547e86a7 The package wfui-test-e2e was found to contain malicious code. Source: ghsa-malware 3440ad1d2e090dbea33cc7a6b8e4cda047b6e20b31fc8bbd3d9e13b1f1758c56...

org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.4.3), org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0, <=26.4.3) +16 more potentially affected by CVE-2025-11538 via org.keycloak:keycloak-quarkus-dist (>=26.0.0, <=26.4.3)

org.keycloak:keycloak-quarkus-dist MAVEN version =26.0.0, =26.3.0, =26.1.0, =26.4.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.4.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.4.3...

CVE-2025-59693

The Chassis Management Board in Entrust nShield Connect XC , nShield 5c , and nShield HSMi (through versions 13.6.11 or 13.7) is vulnerable to an F02 attack. A physically proximate attacker can bypass the tamper label and open the chassis without leaving evidence to access the JTAG connector . Th...

CVE-2025-59694

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allows a physically proximate attacker to persistently modify firmware and influence the insecurely configured appliance boot process. To exploi...

Entrust nShield Connect XC security vulnerabilities

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in the Entrust nShield Connect XC that originates in the physical neighborhood where an attacker can bypass the tamper-evident tags to access the JTAG connector, potentiall...

Update for Adobe Flash Player for Windows Insiders

Update for Adobe Flash Player for Windows Insiders Summary This update has been made available on a limited basis to the Windows Insider Program. It is currently in a test phase and should only be installed on preview build 10.0.17751.1 devices that are enrolled in the Insider Program. More...

CVE-2025-59693

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis...

PT-2025-48677

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS', 'CheckPing' and 'TraceRoute' functions...

MAL-2025-191497 Malicious code in handtalk-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbd2de2aa93921a3f6111d3e9ad813e2a6be91ee060a8bcf7d7a2293ee47cc9 The package handtalk-test-app was found to contain malicious code...

Malicious code in handtalk-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbd2de2aa93921a3f6111d3e9ad813e2a6be91ee060a8bcf7d7a2293ee47cc9 The package handtalk-test-app was found to contain malicious code...

Malicious code in test-dependency-confusion-g3ksec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4019ea08f8cf9052a052193e38b47ae3f486bc8e6c1ccd16f345c9b3e0964b19 The package test-dependency-confusion-g3ksec was found to contain malicious code...

Malicious code in telegram-api-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9de851a49849595878a33272868046f71f86d67b3664a73c4357dd58b2640fc The package telegram-api-test was found to contain malicious code...

MAL-2025-191596 Malicious code in telegram-api-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9de851a49849595878a33272868046f71f86d67b3664a73c4357dd58b2640fc The package telegram-api-test was found to contain malicious code...

Exploit for CVE-2021-21980

CVE-2021-21980 Vulnerable Test Environment Overview Realis...

BackportBench: A Multilingual Benchmark for Automated Backporting of Patches

Many modern software projects evolve rapidly to incorporate new features and security patches. It is important for users to update their dependencies to safer versions, but many still use older, vulnerable package versions because upgrading can be difficult and may break their existing codebase...