CVE-2025-65647

creationtimestamp| type| source ---|---|--- 2025-11-25 22:30:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ifdxiu6g2s...

Authorization Bypass Through User-Controlled Key

Overview @better-auth/passkey is a Passkey plugin for Better Auth Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via a POST /passkey/delete-passkey request. An attacker can delete arbitrary passkeys belonging to other users by providing their...

CVE-2025-13317

creationtimestamp| type| source ---|---|--- 2025-11-22 09:39:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m67iu55fib26...

CVE-2025-12877

creationtimestamp| type| source ---|---|--- 2025-11-22 09:34:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m67il6pwai2b...

CVE-2025-65947

creationtimestamp| type| source ---|---|--- 2025-11-22 03:13:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m66td3vyzv2s 2025-11-22 07:33:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/115592188412650049 2025-11-22 07:33:43+00:00| seen|...

CVE-2025-65946

creationtimestamp| type| source ---|---|--- 2025-11-22 03:08:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m66t25imwg2b 2025-11-23 10:33:13+00:00| seen| https://infosec.exchange/users/offseq/statuses/115598556650095134 2025-11-23 10:33:14+00:00| seen|...

Opto 22 GRV-EPIC and groov RIO

RISK EVALUATION Successful exploitation of this vulnerability could result in the execution of arbitrary shell commands with root privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Opto 22 groov RIO 操作系统命令注入漏洞

The Opto 22 groov RIO is an industrial remote I/O module from Opto 22 USA. An operating system command injection vulnerability exists in the Opto 22 groov RIO that stems from the unsafe use of header value build commands, which could lead to remote code execution...

CVE-2025-65933

creationtimestamp| type| source ---|---|--- 2025-11-19 05:22:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5xj3xxzie2n...

Mozilla Firefox < 62.0.2

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 62.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-22 advisory. - A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local...

CVE-2025-63680: Improper Limitation of a Pathname to a Restricted Directory

Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw CWE-22 that, in combination with Windows ShellExecuteW fallback extension resolution, leads to arbitrary code execution when a user clicks a crafted entry. By creating a trailing-dot folder and placing a...

EUVD-2025-141310

Malicious code in ira-22 npm...

EUVD-2025-143532

Malicious code in alvino-22 npm...

Malicious code in alvino-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a99bb6475dafd7044efaabbca9a8ce04fb53c45aaba0f85e9daa42998c30192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178302 Malicious code in riya-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b3cfda1569b9196cb5680a2d2f278ed98e4daf0a86153746db53d215425c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137072

Malicious code in riya-22 npm...

Malicious code in hokage-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a65417cd3cc409af14585032d67f8c35c9af380afea24e5531cd33be4467438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141522

Malicious code in hokage-22 npm...

EUVD-2025-140421

Malicious code in lia-22 npm...

Malicious code in riya-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b3cfda1569b9196cb5680a2d2f278ed98e4daf0a86153746db53d215425c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...