Mozilla Thunderbird < 140.6

The version of Thunderbird installed on the remote Windows host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-96 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146, Firefox ESR 140.6,...

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6

The 30-year-old Virginia resident evaded capture for years after authorities discovered pipe bombs planted near buildings in Washington, DC, the day before the January 6, 2021, Capitol attack...

CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6

CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6. A patched version of the package is available...

AZL-71077 CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6

Fluent Bit inforward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with network access to the Fluent Bit instance exposing the forward input to send unauthenticated data. By bypassing...

AZL-71074 CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-6

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

CVE-2024-25260 affecting package elfutils for versions less than 0.189-6

CVE-2024-25260 affecting package elfutils for versions less than 0.189-6. A patched version of the package is available...

AZL-70331 CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

CVE-2025-46368

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

EUVD-2025-140388

Malicious code in lia-6 npm...

EUVD-2025-141488

Malicious code in hokage-6 npm...

Malicious code in hokage-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627f0a66556cfa67adfe4d471eb691402ab7964941138852313cb92a0381c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141278

Malicious code in ira-6 npm...

Malicious code in alvira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f050c863503d6c55b869ad4d9e8d12b40bb0259076398191d5c38b49feb6c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-6 (1.0.0)

muklis-6 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-6 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160846...

Malicious code in dia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1a863d6f0638ca62efa765355bfdd7e9139bc40b7f411125cf07a0f029915f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b4b0fe0eef2fe13f3e1ed090f623bcbe197bf69b0a4d8c85f9ff3557f60e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155609 Malicious code in hafiz-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed20b0af7eb17320b96c13d403409e3bf8f39d9e2ab3c40f175e115e0c3d5a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170572 Malicious code in wulan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b4b0fe0eef2fe13f3e1ed090f623bcbe197bf69b0a4d8c85f9ff3557f60e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...