EUVD-2022-2699

Malicious code in bioql PyPI...

EUVD-2022-6017

Malicious code in bioql PyPI...

RLSA-2025:7524 Important: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm LZMA, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fixes: xz: XZ has a...

xz security update

An update is available for xz. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list XZ Utils is an integrated collection of user-space file compression utilities bas...

Hacking-Tools-Master

🔐 Hacking-Tools Master A modular & documented collection of P...

MAL-2025-47457 Malicious code in validator-utils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe16686eac8cc9669d7b7cb7b2fb58b8ee27416f8281bf10cabe5710fff4618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47279 Malicious code in @teselagen/sequence-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a11d947c98673c88f928f02f1c998436f5b00cafcbb36643500a2d0858b8aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @teselagen/file-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da1a31ac60a5206e526134aa3bb58f83fa6e2d32f66cacf06f26a91de3b71f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EulerOS 2.0 SP13 : coreutils (EulerOS-SA-2025-2133)

According to the versions of the coreutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory...

@teselagen/bio-parsers (>=0.1.24 <=0.4.32), @teselagen/ove (>=0.0.18 <=0.8.24) +3 more potentially affected by unknown CVE via @teselagen/range-utils (>=0.1.18 <=0.3.14-beta.3)

@teselagen/range-utils NPM version =0.1.18, =0.1.24, =0.0.18, =0.1.19, =18.2.35, =18.3.6, =18.3.24 Source cves: unknown CVE Source advisory: SNYK:JS-TESELAGENRANGEUTILS-12744521...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

@teselagen/bio-parsers (>=0.1.24 <=0.4.29-beta.1), @teselagen/ove (>=0.0.18 <=0.8.13) +2 more potentially affected by unknown CVE via @teselagen/sequence-utils (>=0.1.19 <=0.3.32)

@teselagen/sequence-utils NPM version =0.1.19, =0.1.24, =0.0.18, =18.2.35, =18.3.6, =18.3.24 Source cves: unknown CVE Source advisory: SNYK:JS-TESELAGENSEQUENCEUTILS-12761781...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

@teselagen/ove (>=0.0.18 <=0.8.25), @teselagen/ui (>=0.0.23 <=0.10.16) +4 more potentially affected by unknown CVE via @teselagen/file-utils (>=0.2.1 <=0.3.20)

@teselagen/file-utils NPM version =0.2.1, =0.0.18, =0.0.23, =15.0.0, =18.3.6, =30.14.19, =30.15.8 Source cves: unknown CVE Source advisory: SNYK:JS-TESELAGENFILEUTILS-12761783...

Insecure Deserialization

picklescan is vulnerable to insecure deserialization. The vulnerability is due to the use of torch.utils.bottleneck.main.runcprofile function to execute remote pickle files, which allows an attacker to run arbitrary code...

Malicious Package

Overview eth-node-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-47179 Malicious code in eth-node-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43e3bae1d6be9bca527622368d2a291d97b40692ce8996525eefb78917c7e0de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

clusterd

This is an open-source application server attack toolkit called clusterd. It automates the fingerprinting, reconnaissance, and exploitation phases of an application server attack. The toolkit currently supports six different application server platforms, with several more in development and...

CVE-2025-10398 fcba_zzm ics-park Smart Park Management System FileUploadUtils.java unrestricted upload

A security flaw has been discovered in fcbazzm ics-park Smart Park Management System 2.0. This vulnerability affects unknown code of the file FileUploadUtils.java. The manipulation of the argument File results in unrestricted upload. The attack can be launched remotely. The exploit has been...

CVE-2025-10398

CVE-2025-10398 affects fcba_zzm ics-park Smart Park Management System 2.0. The vulnerability is in FileUploadUtils.java where manipulation of the File parameter enables unrestricted upload. Exploitation is possible remotely and public exploits are reported. Multiple connected sources corroborate ...