TencentOS Server 4: postgresql (TSSA-2024:0558)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0558 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: netplan (TSSA-2024:0909)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0909 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Siemens SIPROTEC 4 and SIPROTEC 4 Compact Improper Check For Unusual or Exceptional Conditions (CVE-2024-52504)

Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted. This plugin only works with Tenable.ot. Please visit...

PT-2025-47073

Name of the Vulnerable Software and Affected Versions Bdtask Flight Booking Software version 4 Description A flaw exists in Bdtask Flight Booking Software version 4 that allows for unrestricted file upload through the Edit Profile Page, specifically via the /agent/profile/edit file. This...

pgAdmin 4 has command injection vulnerability on Windows systems

pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input...

CVE-2025-12764

Summary of CVE-2025-12764 (pgAdmin4) : The vulnerability affects pgAdmin4 versions up to 9.9 where an improper validation of characters in a username during LDAP authentication allows LDAP injections, which can cause the DC/LDAP server and client to process an excessive amount of data and trigger...

CVE-2025-12763 Command injection vulnerability allowing arbitrary command execution on Windows

pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input...

HP Integrated Lights-Out Information Exposure (CVE-2012-3271)

Unspecified vulnerability on the HP Integrated Lights-Out 3 aka iLO3 with firmware before 1.50 and Integrated Lights-Out 4 aka iLO4 with firmware before 1.13 allows remote attackers to obtain sensitive information via unknown vectors. This plugin only works with Tenable.ot. Please visit...

EUVD-2025-141291

Malicious code in ira-4 npm...

EUVD-2025-141501

Malicious code in hokage-4 npm...

Malicious code in ira-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8f1c7270838a6c6e3579b930789c327ed75c034e6058361d977bd5e837d276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139970

Malicious code in nitaaus-4-reff npm...

EUVD-2025-137034

Malicious code in riya-4 npm...

EUVD-2025-140402

Malicious code in lia-4 npm...

Malicious code in bitha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592463ecee1429ea74cdf7d58be2dc0bc3616080e31008b139ab743e8d14560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146247

Malicious code in wulan-4 npm...

MAL-2025-156549 Malicious code in intan-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7222ff48f9de7bea1743c8b17e5f4d2305e7d920269db500aeef2bc638b466ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155596 Malicious code in hafiz-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55223a0f4957950a4512411668c98866bb6846a58018c850b9cb595a453bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152480 Malicious code in alvira-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc2e985041510760e1fb7f2e5f1fdb302de341b131ccdee1234a816de6b86fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156241 Malicious code in ilang-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8442cea6bcf0204ca37f0558a07718ac8fed90d8800261cbf2df2af699ddd722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...