MAL-2025-111778 Malicious code in current_lark_crimson-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480b467444e81b1025486fa2cab9040661181ec7446c8f2881993075e33d2fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fowl_plum-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeda8d664d9d6ad1d981a35185ce2243c07480dbad43474df529f41ae0df21df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72151

Malicious code in mongooserose-5-tisubasah npm...

MAL-2025-97829 Malicious code in fowl_plum-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeda8d664d9d6ad1d981a35185ce2243c07480dbad43474df529f41ae0df21df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-9403 affecting package jq for versions less than 1.6-5

CVE-2025-9403 affecting package jq for versions less than 1.6-5. A patched version of the package is available...

CVE-2025-1180 affecting package crash for versions less than 8.0.1-5

CVE-2025-1180 affecting package crash for versions less than 8.0.1-5. An upgraded version of the package is available that resolves this issue...

PT-2025-46206

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.5.0-alpha.5 Description Parse Server, an open-source backend deployable on Node.js infrastructures, allows any client to execute MongoDB explain queries without requiring the master key. The explain method...

@pakasa/duuka-airtel-money-pay (>=0.0.12 <=0.0.16), @pakasa/duuka-checkout (>=0.0.1 <=0.0.9) +9 more potentially affected by CVE-2025-12919 via @evershop/evershop (>=1.0.0-rc.5 <=1.2.2)

@evershop/evershop NPM version =1.0.0-rc.5, =0.0.12, =0.0.1, =0.0.5, =0.0.1, =1.0.0, =0.0.2, =0.0.2, =0.0.4, =0.1.2, =1.1.0 Source cves: CVE-2025-12919 Source advisory: OSV:GHSA-C73G-MX2W-CC93...

CVE-2025-52865

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

EUVD-2025-38281

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...

EUVD-2025-38282

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...

CVE-2025-57706

A cross-site scripting XSS vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: File...

CVE-2025-53410

CVE-2025-53410 affects QNAP File Station 5. The flaw is an allocation of resources without limits or throttling (DoS) that can be triggered by a user-authenticated remote attacker, potentially blocking access to resources for other systems/processes. Documents consistently identify File Station 5...

CVE-2025-53412 File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

QNAP Systems File Station 5 代码问题漏洞

QNAP Systems File Station 5 is a file management software from QNAP Systems. A code issue vulnerability exists in QNAP Systems File Station 5 that stems from a null pointer dereference that could lead to a denial of service attack...

Photon OS 5.0: Binutils PHSA-2025-5.0-0670

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0670. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-12638 affecting package keras for versions less than 3.3.3-5

CVE-2025-12638 affecting package keras for versions less than 3.3.3-5. A patched version of the package is available...

Photon OS 5.0: Libtiff PHSA-2025-5.0-0665

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0665. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-44330

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine VM or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data...

PT-2025-44339

Highlights New Product Support AMD Ryzen™ AI 5 330 New Game Support Battlefield™ 6 DX12 Vampire: The Masquerade - Bloodlines 2 DX12 Expanded Vulkan Extension Support VK EXT shader float8 VK KHR video decode vp9 VK KHR video encode av1 VK KHR video encode quantization map VK AMDX dense geometry...