CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

CVE-2025-52331

A Cross-site scripting (XSS) vulnerability exists in the generate report functionality of Rarlab WinRAR 7.11 . The root cause is the inclusion of archived file names in the HTML report without proper validation, which allows for the injection of malicious HTML tags. Successful exploitation requir...

PT-2025-46677

Name of the Vulnerable Software and Affected Versions WinRAR version 7.11 Description A cross-site scripting XSS issue exists in the generate report functionality. This allows attackers to potentially disclose user information, including the computer username, generated report directory, and IP...

Rarlab WinRAR 安全漏洞

Rarlab WinRAR is a file compression/decompression software from Rarlab. A security vulnerability exists in Rarlab WinRAR version 7.11, which originates from cross-site scripting in the Generate Report function and could lead to the disclosure of user information...

CVE-2025-52331: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

CVE-2025-12113: Missing Authorization

The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgaideleteapikey function in all versions up to, and including, 1.8.3. This makes it possible for authenticated...

Malicious code in putri-bika14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9004aaccee21934fee12362c3ba8e9a0c6b86c153ae6f5197a971f480d74142d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133611 Malicious code in fundamental_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce4b3c14679aa7753a222e2d7b420081c35680caedc69b83e0808b01d78770b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138515 Malicious code in zesty_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba71d65c17f09bd483755a349822375ab78248de3b4c9e9b81262ea343dd4798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133155 Malicious code in erick-rangginang14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff7cd51f259c429462d09911fa613cd8f04dc3c0e030cae78d53cc5d295fd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-semur68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e3bb57c015eec6817a03e8dae881f0d0efb490088c2761a71e469d8b341cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ruwet97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2f38472e93b7a8e268de2328d19d2aecd689ca4792742060b6d3f194e6f84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3487c7acadce833e59256a1ad2b71a9bb8868a6425f7e443a21ea22b6aab32bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ragi61-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6fcaeebd2d0ed3b4c93ce77c1c56cf87901a8bf64d96899d6f93771ab535fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mieayam65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76056375238c15cd2e104a57815c9f4caa7a2941ee74fdb1e2d217b6aa5a0025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130185 Malicious code in sinta-tahu94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ff664e51782405294eaad76448222f8f7f9d1fac94dbebddbcea5e791970d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127200 Malicious code in hendra-rawon92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa483a6e733f370e57a95f78689c8fe475b2bfd0ffc4f44374f411da221bfdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128791 Malicious code in nadia-saguer33-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d28b3e8f4128ed37d1a9e108b3c8ca9fe2b3ddaa90c5b3301bbffb32e66eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125515 Malicious code in citra-sego21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179d33f92a983a9acf26b4885041b9c13e1785420bd29972cf50f9888b1a83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5358ec5dac882f5697d342a2bbcd5eb1b84b4618a07e181222a9011863d57eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...