Malicious code in alvino-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e970886fd007eba5d49d01b472db10a5943f9f3398d058c5b96399fa22a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164952 Malicious code in rita-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50b4cbdc3fc2f3ddef9745dcc1b1935452db34328cfa924f0b31bed00672b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157561 Malicious code in kentung-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435c587df5676d0710608509372d0e6e2867eef1adc17e718ecd7cc16186d412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152520 Malicious code in alvira-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d55e6ecc47c30ab19f59b280c495c0cf459f7fca3fcc3cd7086d4ba7d2cc10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152438 Malicious code in alvino-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e970886fd007eba5d49d01b472db10a5943f9f3398d058c5b96399fa22a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty_thrush_pink-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279f3d64ea7c5dbe4bcc71647f4dc6f1bf39292f77578a64f8af20c2b3444e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74905

Malicious code in afraidleoponemerald-77 npm...

EUVD-2025-77493

Malicious code in thoroughleoponjade-77 npm...

EUVD-2021-22801

Malware in sbrugna...

EUVD-2019-15198

Malware in sbrugna...

EUVD-2020-25189

Malware in sbrugna...

Mozilla Thunderbird < 143.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 143.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-77 advisory. - Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142...

Adobe Substance 3D Painter < 11.0.3 (APSB25-77)

The version of Adobe Substance 3D Painter installed on the remote host is prior to 11.0.3. It is, therefore, affected by a vulnerability as referenced in the APSB25-77 advisory. - Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds write vulnerability that could...

Linux Distros Unpatched Vulnerability : CVE-2020-12409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This vulnerability affects Firefox 77...

Linux Distros Unpatched Vulnerability : CVE-2020-12408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This...

CVE-2025-1213

A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be launched remotely. The exploit has...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 6 (6.2.1-77)

This update provides stability fixes. Vulnerability id: VSTOR-86739 A stability fix for Backup Gateway. Vulnerability id: VSTOR-95704, VSTOR-95706 Stability fixes for the S3 service. Vulnerability id: VSTOR-97935 A stability fix for the storage service...

Wavlink AC3000 touchlist_sync.cgi touchlistsync() command injection vulnerability

Talos Vulnerability Report TALOS-2024-2000 Wavlink AC3000 touchlistsync.cgi touchlistsync command injection vulnerability January 14, 2025 CVE Number CVE-2024-34166 SUMMARY An os command injection vulnerability exists in the touchlistsync.cgi touchlistsync functionality of Wavlink AC3000...

Wavlink AC3000 nas.cgi remove_dir() Command Injection Vulnerability

Talos Vulnerability Report TALOS-2024-2054 Wavlink AC3000 nas.cgi removedir Command Injection Vulnerability January 14, 2025 CVE Number CVE-2024-39360 SUMMARY An os command injection vulnerability exists in the nas.cgi removedir functionality of Wavlink AC3000 M33A8.V5030.210505. A specially...

Security Bulletin: Multiple security vulnerabilities in Python affect IBM Robotic Process Automation

Summary Multiple security vulnerabilities in Python affect IBM Robotic Process Automation. Python is used by IBM Robotic Process Automation as part of Watson NLP. This bulletin identifies the fixes to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2019-20916 DESCRIPTION: pypa pip...