Malicious code in n8n-nodes-zalo-tools-vts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2329810f2a1823ea41018ebaecc3088d17c44d6b40443b63ba8cf17463f898a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-zalo-tools-vietinsoft-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558c86142ec5c0ffd34c5b926a423a86c944aaa6c2abf1baaafe98fd68b68589 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5603 Malicious code in n8n-nodes-zalo-tools-vietinsoft-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558c86142ec5c0ffd34c5b926a423a86c944aaa6c2abf1baaafe98fd68b68589 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-34088

An authenticated remote code execution vulnerability exists in Pandora FMS version 7.0NG and earlier. The nettools.php functionality allows authenticated users to execute arbitrary OS commands via the selectips parameter when performing network tools operations, such as pinging. This occurs becau...

CVE-2025-34088 Pandora FMS Authenticated Remote Code Execution via Ping Module

An authenticated remote code execution vulnerability exists in Pandora FMS version 7.0NG and earlier. The nettools.php functionality allows authenticated users to execute arbitrary OS commands via the selectips parameter when performing network tools operations, such as pinging. This occurs becau...

Malicious code in definitelytyped-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91b19bab731bcc203061fb348e461a3142e7c987549dac0d31e0b868a6a8027 Any computer that has this package installed or running should be considered...

The Hidden Weaknesses in AI SOC Tools that No One Talks About

If you're evaluating AI-powered SOC platforms, you've likely seen bold claims: faster triage, smarter remediation, and less noise. But under the hood, not all AI is created equal. Many solutions rely on pre-trained AI models that are hardwired for a handful of specific use cases. While that might...

AZL-64550 CVE-2025-38111 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...

UBUNTU-CVE-2025-38111

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...

PT-2025-27828 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 7.0NG and earlier Description: An authenticated remote code execution issue exists, allowing authenticated users to execute arbitrary OS commands via the select ips parameter in the "net tools.php" functionality when...

Pandora FMS 安全漏洞

Pandora FMS is a monitoring system from Pandora FMS, USA. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization. A security vulnerability exists in Pandora FMS 7.0NG and prior versions, which stems from the nettools.php function that allows...

Fedora 42 : open-vm-tools (2025-23653a72d9)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-23653a72d9 advisory. Update to version 12.5.2. Fixes CVE-2025-22247 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

K000152366: XZ Utils vulnerability CVE-2025-31115

Security Advisory Description XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and...

RHSA-2025:10120 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update

Bulletin has no description...

RHSA-2025:10119 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update

Bulletin has no description...

RHSA-2025:10118 Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 OpenShift Jenkins security update

Bulletin has no description...

RHSA-2025:10104 Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update

Bulletin has no description...

RHSA-2025:10098 Red Hat Security Advisory: Red Hat Product OCP Tools 4.16 OpenShift Jenkins security update

Bulletin has no description...

RHSA-2025:10092 Red Hat Security Advisory: Red Hat Product OCP Tools 4.18 OpenShift Jenkins security update

Bulletin has no description...

Malicious code in score-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfca851a951dcfa02da040d550eff2bc8d72f8dc443582d195d066d32f9dbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...