Malicious code in test-module-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936d1f3885f80ebd88a5759f2792d177f66cd8be5c5c901d948d27d531f31b54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Rational Test Virtualization Server and Rational Test Workbench are vulnerable to denial of service due to Spring MVC (CVE-2024-38828)

Summary Rational Test Control Panel RTCP component of Rational Test Virtualization Server and Rational Test Workbench uses Spring MVC which is vulnerable to a denial of service attack CVE-2024-38828. Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an...

CVE-2025-29226

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt"count" parameter...

The vulnerability of the dmirror_device_evict_chunk() function in the lib/test_hmm.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dmirrordeviceevictchunk function in the lib/testhmm.c module of the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Malicious code in python-socket-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 93a8d30e631680bace9b05db1ac189cbcc472895fcfb1db40f4df52f301a6599 Importing the package starts a script that takes commands from remote server and executes locally --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-3460 Malicious code in python-socket-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 93a8d30e631680bace9b05db1ac189cbcc472895fcfb1db40f4df52f301a6599 Importing the package starts a script that takes commands from remote server and executes locally --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-2479 Malicious code in you-test-vue5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec32cca6168cf6f67a5387e271049dd0d253af0be7055afd2b80f4d2fab43b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-vue7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c757875559b50fa37d08dc9161180f45f2808ab8bd6a0b31113202496811eb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2480 Malicious code in you-test-vue6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fd4454397046cf8aeef6561fc90938310a1172cee3cbb872c07bbddcbe909ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-test-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a9b3aed0c3abe33ee85f5fc9b7c0dd8020835cb6f1c038f1f6dd6822561a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-vue6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fd4454397046cf8aeef6561fc90938310a1172cee3cbb872c07bbddcbe909ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-vue5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec32cca6168cf6f67a5387e271049dd0d253af0be7055afd2b80f4d2fab43b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2481 Malicious code in you-test-vue7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c757875559b50fa37d08dc9161180f45f2808ab8bd6a0b31113202496811eb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-2325

The WP Test Email plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Email Logs in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages...

CVE-2025-2325

CVE-2025-2325 affects the WordPress plugin WP Test Email. The vulnerability is an unauthenticated stored XSS via Email Logs in all versions up to 1.1.8, caused by insufficient input sanitization and output escaping. Exploitation could inject scripts that execute when users load injected pages. Th...

WordPress plugin WP Test Email 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress WP Test Email plugin <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Silent Breach in WordPress Plugin WP Test Email versions = 1.1.8...

Malicious code in newland-component-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4a9b55a483b5ec495bb5e9c06c5285932e3ff8eb091beee14345f52431123f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2350 Malicious code in @od-react/od-react-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2013a6f5bf71bb192bd9c077faf94f1b589b3fa4ca56d2f9038983e8fa35bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @od-react/od-react-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2013a6f5bf71bb192bd9c077faf94f1b589b3fa4ca56d2f9038983e8fa35bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...