Malicious code in xerxes-writable-nightwatch-pavo (npm)

The package xerxes-writable-nightwatch-pavo was found to contain malicious code...

Malicious code in geodynamo-build-passport-writable (npm)

The package geodynamo-build-passport-writable was found to contain malicious code...

Malicious code in subscription-draco-writable-graphql (npm)

The package subscription-draco-writable-graphql was found to contain malicious code...

Malicious code in writable-eslint-config-proxima-vulcan (npm)

The package writable-eslint-config-proxima-vulcan was found to contain malicious code...

MAL-2025-46654 Malicious code in writable-eslint-config-proxima-vulcan (npm)

The package writable-eslint-config-proxima-vulcan was found to contain malicious code...

MAL-2025-43621 Malicious code in bioinformatics-procyon-command-writable (npm)

The package bioinformatics-procyon-command-writable was found to contain malicious code...

MAL-2025-46739 Malicious code in xo-npm-writable-farout (npm)

The package xo-npm-writable-farout was found to contain malicious code...

MAL-2025-43910 Malicious code in cross-env-html-webpack-plugin-writable-dactyl (npm)

The package cross-env-html-webpack-plugin-writable-dactyl was found to contain malicious code...

MAL-2025-46679 Malicious code in xerxes-writable-nightwatch-pavo (npm)

The package xerxes-writable-nightwatch-pavo was found to contain malicious code...

MAL-2025-44394 Malicious code in geodynamo-build-passport-writable (npm)

The package geodynamo-build-passport-writable was found to contain malicious code...

MAL-2025-46159 Malicious code in subscription-draco-writable-graphql (npm)

The package subscription-draco-writable-graphql was found to contain malicious code...

MAL-2025-46792 Malicious code in yildun-writable-mensa-oauth (npm)

The package yildun-writable-mensa-oauth was found to contain malicious code...

CVE-2025-58162

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...

Default mimetype known files writeable on Windows

...

GHSA-VMQV-HX8Q-J7MG Electron has ASAR Integrity Bypass via resource modification

Impact This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. Specifically this issue can only be exploited if your app is launched from a filesystem the attacker has write access too. i.e. the...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591 – Privilege Escalation in Below 1 Introduct...

CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...

CVE-2025-58162

Summary: CVE-2025-58162 affects MobSF. An authenticated user uploading a specially crafted .a archive can write arbitrary files to any location writable by the MobSF process, due to improper handling of absolute paths during AR extraction (ar_extract writes Path(dst)/filtered without validating a...

PT-2025-35522

Name of the Vulnerable Software and Affected Versions MobSF version 4.4.0 Description MobSF is a mobile application security testing tool. An authenticated user who uploaded a specially prepared one.a file could write arbitrary files to any directory writable by the user of the MobSF process. Thi...

Linux Distros Unpatched Vulnerability : CVE-2024-46958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This i...