Malicious code in vuln (npm)

The package vuln was found to contain malicious code...

OPENSUSE-SU-2025:15405-1 govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250730T213748-1.1 package on the GA media of openSUSE Tumbleweed...

UBUNTU-CVE-2025-50088

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

govulncheck-vulndb-0.0.20250527T204717-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250527T204717-1.1 on GA media Announcement ID: openSUSE-SU-2025:15179-1 Rating: moderate Cross-References: CVE-2025-4123 CVE-2025-48075 CVE-2025-48371 CVE-2025-48374 CVSS scores: CVE-2025-4123 SUSE : 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L Affected Products:...

CVE-2023-38457

In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges...

CVE-2025-22010 affecting package kernel for versions less than 6.6.85.1-2

CVE-2025-22010 affecting package kernel for versions less than 6.6.85.1-2. An upgraded version of the package is available that resolves this issue...

autoxx (>=0.0.11, <=0.0.13), vuln-demo-math-ops (1.0.0) potentially affected by CVE-2025-31494 via agpt (0.2.2)

agpt PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on agpt and may be impacted: - autoxx =0.0.11, =0.0.13 - vuln-demo-math-ops 1.0.0 Source cves: CVE-2025-31494 Source advisory: SNYK:PYTHON-AGPT-9802206...

autoxx (>=0.0.11, <=0.0.13), vuln-demo-math-ops (1.0.0) potentially affected by CVE-2025-31491 via agpt (0.2.2)

agpt PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on agpt and may be impacted: - autoxx =0.0.11, =0.0.13 - vuln-demo-math-ops 1.0.0 Source cves: CVE-2025-31491 Source advisory: SNYK:PYTHON-AGPT-9802316...

autoxx (>=0.0.11, <=0.0.13), vuln-demo-math-ops (1.0.0) potentially affected by CVE-2025-31490 via agpt (0.2.2)

agpt PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on agpt and may be impacted: - autoxx =0.0.11, =0.0.13 - vuln-demo-math-ops 1.0.0 Source cves: CVE-2025-31490 Source advisory: SNYK:PYTHON-AGPT-9802320...

btech.com Cross Site Scripting vulnerability OBB-4042976

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

florianonews.com Cross Site Scripting vulnerability OBB-4040909

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in vuln-checker-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 321617c9d897d693d750b3e9f986a6a95c4a4810f21d0534e913990ed1eb673e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vuln-checker-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2719 Malicious code in vuln-checker-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 321617c9d897d693d750b3e9f986a6a95c4a4810f21d0534e913990ed1eb673e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

atmworks.us Cross Site Scripting vulnerability OBB-4038700

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-10762

In lunary-ai/lunary before version 1.5.9, the /v1/evaluators/ endpoint allows users to delete evaluators of a project by sending a DELETE request. However, the route lacks proper access control, such as middleware to ensure that only users with appropriate roles can delete evaluator data. This...

nounupdate.com Cross Site Scripting vulnerability OBB-4035866

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Linux Distros Unpatched Vulnerability : CVE-2024-57809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: imx6: Fix suspend/resume support on i.MX6QDL The suspend/resume functionality is currently broken on the i.MX6QDL platform, as documented in the NXP errata...

sachunlove.com Cross Site Scripting vulnerability OBB-4032479

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49967)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49967 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: no need to continue when the numbe...