CVE-2025-11001: Improper Limitation of a Pathname to a Restricted Directory

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on...

Oracle Linux 7 : squid (ELSA-2025-19167)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19167 advisory. - Fixes CVE-2025-62168, squid: Squid vulnerable to information disclosure via - Fixes CVE-2025-54574, add URN access disabling config options Orabug: 38350105 ...

karchive:k7z_fuzzer: Use-of-uninitialized-value in K7Zip::openArchive

Detailed Report: https://oss-fuzz.com/testcase?key=6574051113107456 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: k7zfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: K7Zip::openArchive karchivefuzzer.cc...

CVE-2025-49795 affecting package libxml2 for versions less than 2.11.5-7

CVE-2025-49795 affecting package libxml2 for versions less than 2.11.5-7. A patched version of the package is available...

AZL-70319 CVE-2025-47913 affecting package podman 5.6.1-10

SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

Malicious code in hokage-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042018ebe8dd474c23147d714f5b0a2e883b4c3b7b9e19af096a75dab87e577a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4810bc0c14186540e44f093caa65f9cfac3cfcf456527a49097e1d694a1f651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137004

Malicious code in riya-7 npm...

EUVD-2025-141487

Malicious code in hokage-7 npm...

Malicious code in ira-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dc12e793251b7a359ecf60a628711581878bc0d492ed76819698b16b942610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce7d6fbd637e6c7c86ba20a1d11b86a6ed59ef43458503b0a3df1e08033bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af30cec982899028cc11277fe1342d4fafa1f15c24430f193d0faaed0a5045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f01cd3dec8fb27366664325820c5631866fb7f238b0757bd554427766292d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292c65ea6b8b41d693acf6c79ce746ac8f169e12db9da28b6497104d8175accf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e839b94de9faff19fd1ef09f97091ae151d76ed0b0d1ee5e285d01788d68cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146213

Malicious code in yuda-7 npm...

Malicious code in ita-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e34b5ca6c69992169d4ca1b47665875827cba5cd74440b9d6ef0bba8e15bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154337 Malicious code in dia-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af30cec982899028cc11277fe1342d4fafa1f15c24430f193d0faaed0a5045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952bbfab0797409b778278f78c3a0f1020f28c06b73ed60490118b0651a04e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156255 Malicious code in ilang-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4357c9320a6cfe95ebcf83778911e5f91c6703415cc7f7d38c22951cd6f06366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...