Malicious code in mms-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68fdee506c83917c4153bbb96b046ba77fac1a06fd42a4450e0da45eaaf0620 The package mms-tools was found to contain malicious code...

Malicious code in epic-tools-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1104037c7b1d7e0e12dba4abaf70dd199ea234043e798128df0d2872cba5332b The package epic-tools-core was found to contain malicious code...

EUVD-2025-37141

Malicious code in epic-google-maps-tools npm...

MAL-2025-49232 Malicious code in mms-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68fdee506c83917c4153bbb96b046ba77fac1a06fd42a4450e0da45eaaf0620 The package mms-tools was found to contain malicious code...

EUVD-2025-37012

iib0011 omni-tools v0.4.0 is vulnerable to remote code execution via unsafe JSON deserialization...

CVE-2025-50739

iib0011 omni-tools v0.4.0 is vulnerable to remote code execution via unsafe JSON deserialization...

[SECURITY] Fedora 42 Update: bind-9.18.41-1.fc42

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 42 Update: qt6-qtshadertools-6.9.3-1.fc42

Qt6 - Qt Shader Tools module builds on the SPIR-V Open Source Ecosystem...

[SECURITY] Fedora 42 Update: mingw-qt6-qttranslations-6.9.3-1.fc42

This package contains the Qt software toolkit for developing cross-platform applications. This is the Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

[SECURITY] Fedora 42 Update: qt6-qtbase-6.9.3-1.fc42

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

CVE-2025-50739

CVE-2025-50739 affects iib0011 omni-tools v0.4.0. The vulnerability arises from unsafe JSON deserialization, enabling remote code execution . The Red Hat, CIRCL, ENISA, NVD, and other feeds corroborate the same description across multiple advisories, with no explicit patch/version fixes detailed ...

CVE-2025-50739

iib0011 omni-tools v0.4.0 is vulnerable to remote code execution via unsafe JSON deserialization...

CVE-2025-50739

iib0011 omni-tools v0.4.0 is vulnerable to remote code execution via unsafe JSON deserialization...

omni-tools 安全漏洞

omni-tools is a self-hosted collection of powerful web tools for everyday tasks by the individual developer Ibrahima G. Coulibaly. A security vulnerability exists in omni-tools version v0.4.0, which stems from insecure JSON deserialization and could lead to remote code execution...

A Comprehensive Evaluation and Practice of System Penetration Testing

With the rapid advancement of information technology, the complexity of applications continues to increase, and the cybersecurity challenges we face are also escalating. This paper aims to investigate the methods and practices of system security penetration testing, exploring how to enhance syste...

PT-2025-44410

Name of the Vulnerable Software and Affected Versions iib0011 omni-tools version 0.4.0 Description iib0011 omni-tools version 0.4.0 is susceptible to remote code execution due to unsafe JSON deserialization. Recommendations At the moment, there is no information about a newer version that contain...

PT-2025-44550

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.8.0 Description The software is susceptible to stored cross-site scripting XSS through the My Tools page. Insufficient validation or escaping of user-supplied input could allow an attacker to inject and execute...

PT-2025-44536

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2012R2.6 Description Nagios XI is susceptible to cross-site scripting XSS through the Tools Menu of its web interface. Insufficient validation or escaping of user-supplied input could allow an attacker to inject and...

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this...

Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-the-Land Tactics

Organizations in Ukraine have been targeted by threat actors of Russian origin with an aim to siphon sensitive data and maintain persistent access to compromised networks. The activity, according to a new report from the Symantec and Carbon Black Threat Hunter Team, targeted a large business...