Malicious code in nucleosynthesis-tool-node-sass-sirius (npm)

The package nucleosynthesis-tool-node-sass-sirius was found to contain malicious code...

Malicious code in tool-elektra-yildun-react-bootstrap (npm)

The package tool-elektra-yildun-react-bootstrap was found to contain malicious code...

Malicious code in ophiuchus-hercules-tool-gatsby (npm)

The package ophiuchus-hercules-tool-gatsby was found to contain malicious code...

Malicious code in tool-tool-gacrux-meteor (npm)

The package tool-tool-gacrux-meteor was found to contain malicious code...

MAL-2025-45737 Malicious code in radioastronomy-node-config-antd-selenium (npm)

The package radioastronomy-node-config-antd-selenium was found to contain malicious code...

MAL-2025-45369 Malicious code in nucleosynthesis-tool-node-sass-sirius (npm)

The package nucleosynthesis-tool-node-sass-sirius was found to contain malicious code...

Malicious code in darkenergy-tool-algol-spica (npm)

The package darkenergy-tool-algol-spica was found to contain malicious code...

Malicious code in farout-adonis-tool-soap (npm)

The package farout-adonis-tool-soap was found to contain malicious code...

MAL-2025-46366 Malicious code in tool-elektra-yildun-react-bootstrap (npm)

The package tool-elektra-yildun-react-bootstrap was found to contain malicious code...

Chess.com Hit by Limited Data Breach Linked to 3rd-Party File Transfer Tool

Chess.com confirms a limited data breach affecting 4,500 users after a third-party file transfer tool was compromised. No…...

CVE-2025-58829

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

CVE-2025-58829 WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

CVE-2025-58829 WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One versions = 2.3.3...

OESA-2025-2190 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

Exploit for CVE-2025-49388

CVE-2025-49388 WordPress Miraculous Core Plugin Plugin OPTI...

Photon OS 5.0: Mariadb PHSA-2025-5.0-0613

An update of the mariadb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0613. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Mind the Gap: Evaluating Model- and Agentic-Level Vulnerabilities in LLMs with Action Graphs

As large language models transition to agentic systems, current safety evaluation frameworks face critical gaps in assessing deployment-specific risks. We introduce AgentSeer, an observability-based evaluation framework that decomposes agentic executions into granular action and component graphs,...

Linux Distros Unpatched Vulnerability : CVE-2024-34001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk. CVE-2024-34001 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2017-11729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1440 in util/decompile.c in Ming 0.4.8, which allows attackers...