MAL-2025-7977 Malicious code in @frozen-ui/tooltip (npm)

The package @frozen-ui/tooltip was found to contain malicious code...

MAL-2025-26192 Malicious code in mensa-supervisor-coronalmassejection-semantic-ui (npm)

The package mensa-supervisor-coronalmassejection-semantic-ui was found to contain malicious code...

MAL-2025-37592 Malicious code in ui-extensions-internal-test (npm)

The package ui-extensions-internal-test was found to contain malicious code...

MAL-2025-38995 Malicious code in webdriver-manager-plutology-query-element-ui (npm)

The package webdriver-manager-plutology-query-element-ui was found to contain malicious code...

MAL-2025-34633 Malicious code in technocracy-native-perseus-element-ui (npm)

The package technocracy-native-perseus-element-ui was found to contain malicious code...

CVE-2025-49755

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49736

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-20306

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system. This vulnerability is due to insufficie...

CVE-2025-20265 Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...

Malicious Package

Overview soonje22 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview duoboardcrawling is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools f...

Malicious Package

Overview backlinkzon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview njongtozon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview nblogduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview deltago4 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview deltago is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

CVE-2025-27845

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Exploit Advanced WinRAR Path Traver...

CVE-2025-27845

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...

CVE-2025-27845

ESPEC North America Web Controller 3 versions prior to 3.3.4 are vulnerable to a security flaw where sending an invalid authentication request to the /api/v4/auth/ endpoint results in the disclosure of a JWT secret . This exposure of sensitive information allows an unauthorized actor to obtain el...