CVE-2025-61532

Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...

CVE-2025-61532

Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...

CVE-2025-61532

CVE-2025-61532 describes a Cross Site Scripting vulnerability in SVX Portal v2.7A affecting the last_heard_page.php component, exploitable via the TG parameter to execute arbitrary code. The issue is documented across multiple feeds (NVD, Red Hat, CNNVD, CVE records) with an impact described as a...

SVXportal 安全漏洞

SVXportal is a portal for Peter's individual developers. A security vulnerability exists in SVXportal version 2.7A, which stems from a cross-site scripting vulnerability in the TG parameter in the lastheardpage.php component that could lead to the execution of arbitrary code...

EUVD-2017-8954

Malware in sbrugna...

EUVD-2017-8631

Malware in sbrugna...

EUVD-2017-8952

Malware in sbrugna...

EUVD-2017-8947

Malware in sbrugna...

EUVD-2017-8632

Malware in sbrugna...

EUVD-2023-23626

Malicious code in bioql PyPI...

Malicious code in tg-seq-gen (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e83c207a30feba0d5d041c70319284c5872d9f00baab2d79a77ab6a8f267936 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47352 Malicious code in tg-seq-gen (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e83c207a30feba0d5d041c70319284c5872d9f00baab2d79a77ab6a8f267936 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in tg-redbird (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381bdac7467e1d835aecf58e3cfebc472a5db3afa8109ad93f30ff7f6e020e09 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47351 Malicious code in tg-redbird (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381bdac7467e1d835aecf58e3cfebc472a5db3afa8109ad93f30ff7f6e020e09 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in tg-client-query-builder (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88f4b4247a247c45d69b7c6082806c246a97e993f3db259215f30d0774e8db7 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47350 Malicious code in tg-client-query-builder (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88f4b4247a247c45d69b7c6082806c246a97e993f3db259215f30d0774e8db7 Any computer that has this package installed or running should be considered fully compromised. All...

@frdl/webfan-server (>=0.1.27 <=0.1.31) potentially affected by unknown CVE via tg-redbird (=1.3.0)

tg-redbird NPM version =1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tg-redbird and may be impacted: - @frdl/webfan-server =0.1.27, =0.1.31 Source cves: unknown CVE Source advisory: SNYK:JS-TGREDBIRD-12744622...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

MAL-2025-13804 Malicious code in @zalastax/nolb-react-tg (npm)

The package @zalastax/nolb-react-tg was found to contain malicious code...

MAL-2025-191824 Malicious code in prof-tg-dooorto-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b4b5d4d87a39a286c8665b40b510ac0016d0b71fcc83fde246dd1bca7402af09 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...