CVE-2025-53234

creationtimestamp| type| source ---|---|--- 2026-01-20 20:03:37+00:00| seen| Telegram/vDPjge6K1tF404WPf9Q1hmt1q7CFqM-WlHcCHFTuMGtlY9k...

MiracleLinux 7 : firefox-102.5.0-1.0.1.el7.AXS7 (AXSA:2022-4189:37)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4189:37 advisory. Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404...

CVE-2025-15377

creationtimestamp| type| source ---|---|--- 2026-01-14 07:37:09+00:00| seen| https://gist.github.com/Darkcrai86/8d268a74ae20359fdb2b00789ce828bd...

CVE-2025-68957

creationtimestamp| type| source ---|---|--- 2026-01-14 03:37:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mce5dlbwud2o 2026-01-14 04:05:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mce6vnlbmi2m...

CVE-2023-53946

creationtimestamp| type| source ---|---|--- 2025-12-20 00:03:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maevqjcijz2c 2025-12-23 11:48:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3manojltyiu2p...

CVE-2025-65945

creationtimestamp| type| source ---|---|--- 2025-12-17 21:00:04+00:00| published-proof-of-concept| Telegram/LegeDtMxRTlSxU-E4vRWPyR6r8eVZBSkTQd0bvp4AR24yPQ 2025-12-19 07:37:44+00:00| seen| https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3mad6lpicwob2 2026-02-13 15:00:08+00:00|...

CVE-2025-65513

creationtimestamp| type| source ---|---|--- 2025-12-09 23:29:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lp6isx3p2y 2026-01-02 18:46:25+00:00| published-proof-of-concept| Telegram/PJ0624gDLdyTO0vVvr-4zwa3ib0JJFcfMDnXcsBI6RfrbkA 2026-01-02 21:51:10+00:00| seen|...

GHSA-644F-HRFF-MF96 Duplicate Advisory: Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mv7p-34fv-4874. This link is maintained to preserve external references. Original Description A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37. The affected element is an unknown function of t...

CVE-2025-9230 affecting package openssl for versions less than 1.1.1k-37

CVE-2025-9230 affecting package openssl for versions less than 1.1.1k-37. A patched version of the package is available...

EUVD-2025-137040

Malicious code in riya-37 npm...

EUVD-2025-141505

Malicious code in hokage-37 npm...

EUVD-2025-140405

Malicious code in lia-37 npm...

Malicious code in riya-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f7ac2be5c0d8271aa0e619c362f4a2f306d20e90c3d704010fbecac8b592c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143517

Malicious code in alvino-37 npm...

EUVD-2025-141294

Malicious code in ira-37 npm...

MAL-2025-178318 Malicious code in riya-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f7ac2be5c0d8271aa0e619c362f4a2f306d20e90c3d704010fbecac8b592c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174774 Malicious code in hokage-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76904493617489a581b85d16f79c848dc3e8589897d9aecb6fe10846e0c96d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532bfb26621d7810f331372311b1991dfbc66428059d27feb1ecd42d383d5288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a404937eef1a48885f91dbc0046ea6f12eb9ee1a353feb971cba9672871224cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c68fbb9a623f295a55deffcb45f8b71685654007828a8b55a92413e60df94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...