CVE-2025-12764

Summary of CVE-2025-12764 (pgAdmin4) : The vulnerability affects pgAdmin4 versions up to 9.9 where an improper validation of characters in a username during LDAP authentication allows LDAP injections, which can cause the DC/LDAP server and client to process an excessive amount of data and trigger...

CVE-2025-12763 Command injection vulnerability allowing arbitrary command execution on Windows

pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input...

HP Integrated Lights-Out Information Exposure (CVE-2012-3271)

Unspecified vulnerability on the HP Integrated Lights-Out 3 aka iLO3 with firmware before 1.50 and Integrated Lights-Out 4 aka iLO4 with firmware before 1.13 allows remote attackers to obtain sensitive information via unknown vectors. This plugin only works with Tenable.ot. Please visit...

EUVD-2025-141291

Malicious code in ira-4 npm...

EUVD-2025-141501

Malicious code in hokage-4 npm...

Malicious code in ira-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8f1c7270838a6c6e3579b930789c327ed75c034e6058361d977bd5e837d276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139970

Malicious code in nitaaus-4-reff npm...

EUVD-2025-137034

Malicious code in riya-4 npm...

EUVD-2025-140402

Malicious code in lia-4 npm...

Malicious code in bitha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592463ecee1429ea74cdf7d58be2dc0bc3616080e31008b139ab743e8d14560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146247

Malicious code in wulan-4 npm...

MAL-2025-156549 Malicious code in intan-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7222ff48f9de7bea1743c8b17e5f4d2305e7d920269db500aeef2bc638b466ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156241 Malicious code in ilang-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8442cea6bcf0204ca37f0558a07718ac8fed90d8800261cbf2df2af699ddd722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155596 Malicious code in hafiz-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55223a0f4957950a4512411668c98866bb6846a58018c850b9cb595a453bdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152480 Malicious code in alvira-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebc2e985041510760e1fb7f2e5f1fdb302de341b131ccdee1234a816de6b86fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3786b8e00dfa16a908c2c5c3b57a5c3cbe02770e58fc0fb4d4f0e27c7e35d84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160824 Malicious code in muklis-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b035e17e6c2d344e5e658fcda25c60add554a83d778006c95954ae9eb967329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e678d34e8356f50e80c8c4832f41020bf23762aaa9e4ce27bf7051c866774e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e273e508a8868d302b61a6fa44b89427294635961421cbec37e3d2784bb6f99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21d45ea747947cef40b5ef0515d23e7592d6a8c4031f343a00256f03e490b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...