MAL-2025-93168 Malicious code in aggregate_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f3cbaf3b8ae816e2db3e00e625d46f4096baa8f62081f15b0132c884c419e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65385

Malicious code in aggregatesailfishz3n npm...

EUVD-2025-65384

Malicious code in aggregateweaselz3n npm...

MAL-2025-93170 Malicious code in aggregate_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123e17f0bf8e61e1ddc748b6c68f48d7ded01664c70afa4b590dded265a1830a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate-gold-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2132e283d5543a65f9f6093851b4f7522ad852f3745d713de808d9fbf117d072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55951

Malicious code in aggregate-gold-koala npm...

EUVD-2025-55950

Malicious code in aggregate-scarlet-reindeer npm...

MAL-2025-66698 Malicious code in aggregate-gold-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2132e283d5543a65f9f6093851b4f7522ad852f3745d713de808d9fbf117d072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50730

Malicious code in aggregateelkz3n npm...

EUVD-2025-50728

Malicious code in aggregatemeerkatz3n npm...

MAL-2025-59942 Malicious code in aggregate_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488e6ca0378529f927c2e4d3f7864ecf8dadb20d1eb8200422f45cdb38cfc110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ROS-20251106-04

Vulnerability of django.utils.archive.extract function of Django web application software platform is related to errors in the relative directory path handling mechanism. Exploitation of the vulnerability could allow a remote attacker to bypass security restrictions. Vulnerability in...

PT-2025-44277

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s sch qfq scheduler within the agg dequeue function net/sched/sch qfq.c. A null dereference could occur when cl-qdisc-ops-peekcl-qdisc returns NULL,...

SUSE CVE-2022-50560

In the Linux kernel, the following vulnerability has been resolved: drm/meson: explicitly remove aggregate driver at module unload time Because componentmasterdel wasn't being called when unloading the mesondrm module, the aggregate device would linger forever in the global aggregatedevices list...

CVE-2025-34155

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

CVE-2025-34156

Tibbo AggreGate Network Manager 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could ai...

CLSA-2025-1760649409 Fix CVE(s): CVE-2025-6965

SECURITY UPDATE: excessive aggregate terms potentially leading to memory corruption - debian/patches/CVE-2025-6965.patch: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns - CVE-2025-6965...

Lightweight and Breach-Resilient Authenticated Encryption Framework for Internet of Things

The Internet of Things IoT relies heavily on resource-limited devices to communicate critical e.g., military data information under low-energy adversarial environments and low-latency wireless channels. Authenticated Encryption AE guarantees confidentiality, authenticity, and integrity, making it...

EulerOS 2.0 SP13 : sqlite (EulerOS-SA-2025-2278)

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. Thi...

NewStart CGSL MAIN 7.02 : sqlite Vulnerability (NS-SA-2025-0246)

The remote NewStart CGSL host, running version MAIN 7.02, has sqlite packages installed that are affected by a vulnerability: - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memo...