16128 matches found
We opened a fake invoice and fell down a retro XWorm-shaped wormhole
Somebody forwarded an “invoice” email and asked me to check the attachment because it looked suspicious. Good instinct—it was, and what we found inside was a surprisingly old trick hiding a modern threat. What it does If the recipient had opened the attached Visual Basic Script .vbs file, it woul...
CVE-2025-12872
The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL...
CVE-2025-12870
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges...
CVE-2025-12871
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges...
CVE-2025-64752: Server-Side Request Forgery (SSRF)
grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged network access of server-side requests could offer opportunities for attack...
Malicious code in mlokok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb17455f65253ba6be5fab612a797aa6f0433340a49ab2fdfcc8da3e2b595f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84119092b3a8966c43f09ffb7dbf6bbe86ba409a52f94d25f5e88ea79daf69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlook-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9b5a7dfff6237a039094d2e2adf4b39a2bc4a3c6455d6e0c36b361b6b24230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mlokok-lofei-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b321b72ebcdbe6ffd99acc812534d90b178c328d151618b7d81112a98de416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137415
Malicious code in imalok-ofe-a npm...
Malicious code in imalok-ofe-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d74b001422dfb69cf1a9df82c264d2ec65893db4edac2e3475812a5837fc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kisut-fafunig-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf33d71b8a5bd4ffb25a0d71666b0dedffc0f19b9f3467800845a6aaddd5f42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134428
Malicious code in kisut-faig-a npm...
EUVD-2025-134479
Malicious code in kisut-fafnig-a npm...
EUVD-2025-134927
Malicious code in a-pem-misa npm...
EUVD-2025-134452
Malicious code in kisut-faifg-a npm...
EUVD-2025-134453
Malicious code in kisut-faifg-a npm...
EUVD-2025-134389
Malicious code in kisut-fanig-a npm...