MAL-2025-98371 Malicious code in stylo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f864bb450aa8afd6f3ca8ab8df433e9868bf257f105240e40aef9008231961a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97840 Malicious code in gatau-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6f40b9421e4fb02e10a5640e5bdeb296f270d0971a7a63ca08113a4dc14886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98328 Malicious code in sadboy-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d58c3b6b5017e7d60642f46540fd2ca728018a071e80a4c5851e8b3cbcdd3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71962

Malicious code in sadboy-app npm...

EUVD-2025-72304

Malicious code in joktooll-app npm...

Malicious code in joktooll-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d36f383fe9060d9eac46ea81cddb465b74c368c797b27cc82fb343d38d34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72279

Malicious code in kosan-app npm...

CVE-2025-42887

creationtimestamp| type| source ---|---|--- 2025-11-11 02:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5d2ic7e2s2w 2025-11-11 03:02:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5d5k2bztr2l 2025-11-11 08:41:07+00:00| seen|...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that originates from a malicious ACAP application that can obtain administrator-level service account credentials used by a legitimate ACAP application, potentially resulting in elevated privileges f...

Intel ACAT 安全漏洞

Intel ACAT is an open source platform from Intel Corporation USA. A security vulnerability exists in Intel ACAT versions prior to 3.13, which stems from a competitive condition in the Ring 3 user application that could lead to a denial-of-service attack...

Advantech WebAccess/VPN Command Injection Vulnerability

Advantech WebAccess/VPN is a virtual private network feature integrated in Advantech WebAccess/SCADA software, designed to provide a secure and reliable network connectivity solution for industrial automation and remote monitoring systems. Advantech WebAccess/VPN suffers from a command injection...

PT-2025-46307

Name of the Vulnerable Software and Affected Versions Axis Communications ACAP applications affected versions not specified Description ACAP applications may be able to gain elevated privileges due to improper input validation, which could lead to privilege escalation. This is only possible if th...

EUVD-2025-50796

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

CVE-2025-12439 affects Google Chrome (Windows) prior to 142.0.7444.59 due to an inappropriate implementation in App-Bound Encryption. A local attacker could obtain potentially sensitive information from a process’s memory via a malicious file. This is a Chromium-based issue affecting Chrome/Chrom...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

Fantasy Hub is spyware for rent—complete with fake app kits and support

Researchers at Zimperium identified Fantasy Hub, a new Android spyware developed and sold as a subscription on Russian-language cybercrime forums. Malware-as-a-Service MaaS means cybercriminals rent out to malware to other criminals, complete with the infrastructure necessary to harvest and abuse...