MAL-2025-37358 Malicious code in twentyoverten-ui-library (npm)

The package twentyoverten-ui-library was found to contain malicious code...

MAL-2025-21903 Malicious code in graviton-semantic-ui-eigenstate-photon (npm)

The package graviton-semantic-ui-eigenstate-photon was found to contain malicious code...

MAL-2025-34633 Malicious code in technocracy-native-perseus-element-ui (npm)

The package technocracy-native-perseus-element-ui was found to contain malicious code...

MAL-2025-19866 Malicious code in esolutions-ui-framework (npm)

The package esolutions-ui-framework was found to contain malicious code...

MAL-2025-7975 Malicious code in @frozen-ui/snapshot-serializer (npm)

The package @frozen-ui/snapshot-serializer was found to contain malicious code...

MAL-2025-37592 Malicious code in ui-extensions-internal-test (npm)

The package ui-extensions-internal-test was found to contain malicious code...

CVE-2025-49755

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49736

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-20306

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system. This vulnerability is due to insufficie...

CVE-2025-20265 Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...

Malicious Package

Overview deltago is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview duoboardcrawling is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools f...

Malicious Package

Overview backlinkzon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview soonje22 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview deltago4 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview njongtozon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview nblogduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

CVE-2025-27845

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-8088 WinRAR Exploit Advanced WinRAR Path Traver...

CVE-2025-27845

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...