Grafana OSS Organization Switching Redirect

The vulnerability of the OSS Organization Switching component of the Grafana monitoring and observation platform involves redirecting the URL to an unreliable website when loading the login page. Exploiting this vulnerability allows a malicious actor to redirect users to any desired website...

CVE-2025-55709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45.15.0...

Malicious code in react-native-website (npm)

The package react-native-website was found to contain malicious code...

Malicious code in manifold-website (npm)

The package manifold-website was found to contain malicious code...

Malicious code in monitor-website (npm)

The package monitor-website was found to contain malicious code...

Malicious code in ng-website (npm)

The package ng-website was found to contain malicious code...

Malicious code in proctor-website (npm)

The package proctor-website was found to contain malicious code...

Malicious code in website-bundle (npm)

The package website-bundle was found to contain malicious code...

Malicious code in risc-zero-developer-website (npm)

The package risc-zero-developer-website was found to contain malicious code...

Malicious code in test-website-hashroute (npm)

The package test-website-hashroute was found to contain malicious code...

MAL-2025-32271 Malicious code in risc-zero-developer-website (npm)

The package risc-zero-developer-website was found to contain malicious code...

MAL-2025-9267 Malicious code in @react-native-website/update-redirects (npm)

The package @react-native-website/update-redirects was found to contain malicious code...

MAL-2025-25895 Malicious code in manifold-website (npm)

The package manifold-website was found to contain malicious code...

MAL-2025-31831 Malicious code in react-native-website (npm)

The package react-native-website was found to contain malicious code...

MAL-2025-39049 Malicious code in website-bundle (npm)

The package website-bundle was found to contain malicious code...

MAL-2025-36703 Malicious code in test-website-hashroute (npm)

The package test-website-hashroute was found to contain malicious code...

MAL-2025-27462 Malicious code in ng-website (npm)

The package ng-website was found to contain malicious code...

MAL-2025-29693 Malicious code in proctor-website (npm)

The package proctor-website was found to contain malicious code...

MAL-2025-26652 Malicious code in monitor-website (npm)

The package monitor-website was found to contain malicious code...

CVE-2025-55709

CVE-2025-55709 is a storage XSS flaw in the Visual Composer Website Builder plugin. The vulnerability arises from improper input neutralization during web page generation, enabling stored XSS in the affected plugin. Evidence from multiple sources indicates the vulnerability affects the Visual Com...