Malicious code in alvira-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd240b3ca9f653f3f8bea59211fddeb5b889b7d326d9af500fe1808d2513ca54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93526

Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially...

CVE-2025-27712

Improper neutralization for some IntelR Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...

CVE-2025-32038

CVE-2025-32038 concerns an uncontrolled search path in the FPGA Support Package for the Intel oneAPI DPC++/C++ Compiler software prior to version 2025.0.1. Multiple sources (including Red Hat, Intel advisory INTEL-SA-01364) describe that, when Ring 3: User Applications executes, an unprivileged a...

CVE-2025-26405

Improper control of dynamically-managed code resources for some IntelR NPU Drivers within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...

EUVD-2025-74609

Malicious code in givenlimpetaqua-3 npm...

EUVD-2025-74839

Malicious code in characteristiccamelivory-3 npm...

EUVD-2025-74573

Malicious code in hissingpigeonfuchsia-3 npm...

EUVD-2025-74772

Malicious code in cuteurialcoral-3 npm...

EUVD-2025-74831

Malicious code in chronickoilavender-3 npm...

Malicious code in thirsty_raven_lime-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0a9bb392035fd263cd218c236e3bde5aee3b8bbe6b5c3514e4eacd7712c324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voiceless_spider_silver-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe69a43698ddb848a983c04bd410d9fbc50bbfc06ddc861a445c1e488d4e3a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63455

Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2NITRO-ENCLAVES-2025-073 (ALASNITRO-ENCLAVES-2025-073)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-073 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitt...

PT-2025-46424

Name of the Vulnerable Software and Affected Versions Intel oneAPI Math Kernel Library versions prior to 2025.2 Description The software contains an improper input validation issue within Ring 3: User Applications that may allow for a denial of service. An unprivileged software adversary with an...

CVE-2025-48878

Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user e.g. with Service desk agent profile to create a ModuleInstallation object when they shouldn't be able to do so. Version 3.2.2 fixes the issue...

CVE-2025-48878

CVE-2025-48878 affects Combodo iTop (3.x) prior to 3.2.2. The vulnerability is an insecure direct object reference that allows a user (e.g., with a Service desk agent profile) to create a ModuleInstallation object when they should not be able to. The issue is resolved in 3.2.2. Impact details are...

EUVD-2025-48939

Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63455

Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63455

Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...