MAL-2025-156255 Malicious code in ilang-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4357c9320a6cfe95ebcf83778911e5f91c6703415cc7f7d38c22951cd6f06366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154337 Malicious code in dia-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af30cec982899028cc11277fe1342d4fafa1f15c24430f193d0faaed0a5045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170599 Malicious code in yuda-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e839b94de9faff19fd1ef09f97091ae151d76ed0b0d1ee5e285d01788d68cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74667

Malicious code in extraordinarywildebeestcrimson-7 npm...

EUVD-2025-74644

Malicious code in fiscalscorpioncyan-7 npm...

EUVD-2025-74467

Malicious code in medicallungfishblush-7 npm...

EUVD-2025-74401

Malicious code in oppositeguppysilver-7 npm...

Malicious code in grubby_ermine_white-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088e93156cdef879fc1e99d71dd4f0da07104d59512f47fe3ce97f5e74377220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74723

Malicious code in drabemugray-7 npm...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77479

Malicious code in valuablesnipeblack-7 npm...

CVE-2025-4373 affecting package glib for versions less than 2.71.0-7

CVE-2025-4373 affecting package glib for versions less than 2.71.0-7. A patched version of the package is available...

CVE-2024-34397 affecting package glib for versions less than 2.71.0-7

CVE-2024-34397 affecting package glib for versions less than 2.71.0-7. A patched version of the package is available...

CVE-2025-12167: Missing Authorization

The Contact Form 7 AWeber Extension plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxaweberlogreset' AJAX endpoint in all versions up to, and including, 0.1.42. This makes it possible for authenticated attackers, with...

PT-2025-45550

Name of the Vulnerable Software and Affected Versions Contact Form 7 AWeber Extension versions through 0.1.42 Description The Contact Form 7 AWeber Extension plugin for WordPress has a flaw that allows unauthorized data modification. This is due to a missing capability check on the wp ajax aweber...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.29+7 October 2025 CPU: CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data bsc1252414. CVE-2025-53066: Fixed unauthenticated...

Oracle Linux 7 : linux-firmware (ELSA-2025-25742)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25742 advisory. 20251030-999.44.1.gite9292517.el7 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...

SUSE-SU-2025:3943-1 Security update for qatengine, qatlib

This update for qatengine, qatlib fixes the following issues: Note that the 1.6.1 release included in 1.7.0 fixes the following vulnerabilities: bsc1233363 CVE-2024-28885 bsc1233365 CVE-2024-31074 bsc1233366 CVE-2024-33617 Update to 1.7.0: ipp-crypto name change to cryptography-primitives QATSW G...

Veeam Backup & Replication 13: Changes to Supported Linux Platforms

Article Applicability This article lists the specific Linux distributions and versions that will no longer be supported starting with Veeam Backup & Replication and Veeam Agent for Linux version 13. These lists are intended for customers currently running Veeam Backup & Replication 12.3 and Veeam...