Malicious code in above-blue-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5d788a480e941f1b36b843708ab8ec0619ef2693bc8cc761317503301969f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-beige-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d689bdc49f4c3c2908b88030acd8bd522a89ffa400e01a7375ddd928e9c5856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56076

Malicious code in above-beige-hawk npm...

EUVD-2025-56074

Malicious code in above-coral-booby npm...

EUVD-2025-56075

Malicious code in above-blue-puffin npm...

EUVD-2025-56078

Malicious code in above-apricot-echidna npm...

EUVD-2025-56073

Malicious code in above-lime-sheep npm...

EUVD-2025-50769

Malicious code in aboveostrichz3n npm...

EUVD-2025-50768

Malicious code in aboveparakeetz3n npm...

EUVD-2025-50771

Malicious code in aboveflamingoz3n npm...

CVE-2025-10635

CVE-2025-10635 affects the WordPress plugin Find Me On (versions up to 2.0.9.1). The vulnerability is a SQL injection caused by lack of sanitization/escaping of a parameter before it is used in a SQL statement, enabling authenticated users with Subscriber+ privileges to exploit it. Impact per sou...

EUVD-2021-9345

Malicious code in bioql PyPI...

CVE-2025-22427

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

Linux Distros Unpatched Vulnerability : CVE-2024-35988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASKSIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in...

PT-2025-33495 · Unknown · Xolluteon Dropshix

Name of the Vulnerable Software and Affected Versions: Xolluteon Dropshix versions through 4.0.14 Description: Improper neutralization of input during web page generation allows for DOM-Based Cross-site Scripting XSS. Recommendations: Update Xolluteon Dropshix to a version later than 4.0.14...

PT-2025-33162 · WordPress · Thank You Page Customizer For Woocommerce – Increase Your Sales

Name of the Vulnerable Software and Affected Versions: VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales versions through 1.1.7 Description: A missing authorization issue exists in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales, allowing...

CVE-2022-24784

Statamic is a Laravel and Git powered CMS. Before versions 3.2.39 and 3.3.2, it is possible to confirm a single character of a user's password hash using a specially crafted regular expression filter in the users endpoint of the REST API. Multiple such requests can eventually uncover the entire...

PT-2025-7193

Name of the Vulnerable Software and Affected Versions: Post Thumbs versions n/a through 1.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

CVE-2025-0471

The CVE-2025-0471 entry concerns PMB platform unrestricted file upload allowing remote access and command execution. Affected versions include 4.0.10 and later (CNNVD cites up to 4.2.13). The underlying issue is unrestricted file upload in PMB platform, enabling an attacker to upload a file to ga...

CVE-2025-0471 Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform

Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely...