CVE-2025-22409

In rfcsendbufuih of rfctsframes.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

MAL-2025-42111 Malicious code in vite-ts-icon (npm)

The package vite-ts-icon was found to contain malicious code...

Malicious code in vite-ts-icon (npm)

The package vite-ts-icon was found to contain malicious code...

CVE-2025-30273

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.314...

CVE-2025-30271 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-30264

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145...

Malicious code in react-media-template-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2fff48804ddfb5297954a2040eb8f90fd5ca36c31568a46d56d860ecf47148 The OpenSSF Package Analysis project identified 'react-media-template-ts' @ 10.0.1 npm as malicious. It is considered malicious because: - The...

QNAP QTS buffer error vulnerability

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

Malicious code in eslint-ts-view (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41555 Malicious code in eslint-ts-view (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41344 Malicious code in xpoc-ts-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6aabe2bdc2f87978954e778f491ee06641df1ca2ebdce2b151881f7b8c7c063 The OpenSSF Package Analysis project identified 'xpoc-ts-lib' @ 99.0....

Malicious code in @zalastax/nolb-react-ts (npm)

The package @zalastax/nolb-react-ts was found to contain malicious code...

Malicious code in ng-demo-lib-ts (npm)

The package ng-demo-lib-ts was found to contain malicious code...

Malicious code in object-tools-ts (npm)

The package object-tools-ts was found to contain malicious code...

Malicious code in ont-ts (npm)

The package ont-ts was found to contain malicious code...

Malicious code in rbx-parser-ts (npm)

The package rbx-parser-ts was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in ts-npm (npm)

The package ts-npm was found to contain malicious code...

Malicious code in ts-petstore-client (npm)

The package ts-petstore-client was found to contain malicious code...

Malicious code in fork-ts-checker-webpack-plugin-v5 (npm)

The package fork-ts-checker-webpack-plugin-v5 was found to contain malicious code...

Malicious code in osmo-ts (npm)

The package osmo-ts was found to contain malicious code...