Mozilla Thunderbird < 140.6

The version of Thunderbird installed on the remote Windows host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-96 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146, Firefox ESR 140.6,...

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6

The 30-year-old Virginia resident evaded capture for years after authorities discovered pipe bombs planted near buildings in Washington, DC, the day before the January 6, 2021, Capitol attack...

CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6

CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6. A patched version of the package is available...

AZL-71074 CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-6

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

AZL-71077 CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6

Fluent Bit inforward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing...

CVE-2024-25260 affecting package elfutils for versions less than 0.189-6

CVE-2024-25260 affecting package elfutils for versions less than 0.189-6. A patched version of the package is available...

AZL-70331 CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

CVE-2025-46368

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

Malicious code in hokage-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627f0a66556cfa67adfe4d471eb691402ab7964941138852313cb92a0381c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141488

Malicious code in hokage-6 npm...

EUVD-2025-141278

Malicious code in ira-6 npm...

EUVD-2025-140388

Malicious code in lia-6 npm...

EUVD-2025-146240

Malicious code in wulan-6 npm...

Malicious code in alvira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f050c863503d6c55b869ad4d9e8d12b40bb0259076398191d5c38b49feb6c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc7df202cebdf85845eff24a7cc1c7024aa99ccdf24033ce226a4847480cc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b4b0fe0eef2fe13f3e1ed090f623bcbe197bf69b0a4d8c85f9ff3557f60e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37ac08e129c9b44df8a3de1b2cd340dada43158334be6c56f67f3c3b6c8d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ecb2b77ac2a7d3f6932b83e0f435777e3e32b0ceb1de27aa007bed3886eae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...