CVE-2025-11794: Exposure of Sensitive Information to an Unauthorized Actor

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

Siemens SIMATIC S7-1500 Uncaught Exception (CVE-2024-28835)

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the certtool --verify-chain command. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Malicious code in verify-ai-aisai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222ae743035d6f9b11b3e42d3795d9c7cb71dbdee9f887922c45bb52e8e9707b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusamakuii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088ee8ac2b4c0e2c741bd22d0b905e6670f2ea7903ff0653960ef10a8f22a52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-misaaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4b43fb30991ca8f061d00dd4cc70b497d517bb3012199042bb45ac201508ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-ukasiamuisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf5d86863a885e228dfcd4437abdb9e5194f8751f1fc957652bc0107bc07cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-mi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70122132d3e2f72ca21e61521daa42d3f665700c576b55bdd41fb9d2eab679b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-miaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b692155750f71977bb11bf43f44618ad8e85e3d6568a319da2a573b543c9a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-miau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a13a7acbfdf1222621a1e0e6503c4311d382035a1e1fe451cfaf865a68be9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-mik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c3a62295e891116edf312160e7b3b791559f01c06031a01f0bfdf3646a2b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75d5496798dc2b42cf187da2c3f8b5356831d74c6c5f0b8fc74a9b5041440a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misuanuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd55cdcaceee8c17267dd774f7cebe43e2c0f7cde17dafa0dfc9ff4831d49a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misuanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca2108caa852cc0264f4ced7d032d3ed3261ad589536c0e551e80945f60fd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-sulap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cdacead516615fcb81516a72715827fdefdc8118a7f1141f496a40dbc8c2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-sulapaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc43292fc4c039a8a4970b3b6e3103af46600f392a6c85bd54b225c690abe187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debb4ce171e9ff2a0fed8e72df999de7a42c2192905c7d056eb2ed0abf8f2576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616f4fa7dd85a616d87c27d67e7549a30ff802bd7c7c38ef1a4a4e41a09a400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukasiamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678dc9dc5ddf26ff5341680dab78e5e944f44d4ee42b0b664613e0683e138d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukasiamunsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47688d142037065dc59318fc285be09b89866bc93f66d707c1b48e1ab322c8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aiun-miska (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a02d54c4cdc13a90f287e135c7ed287cd33dd2d31f2e5c9b670e56cd3631019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...