Mattermost fails to properly restrict access to archived channel search API

Mattermost versions 11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the /api/v4/teams/teamid/channels/searcharchived endpoint...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in versions prior to Mattermost 11 that stems from a failure to properly restrict access to the archive channel search API, which could lead to the discovery of archived...

CVE-2025-12844

CVE-2025-12844 affects the WordPress plugin AI Engine (versions up to and including 3.1.8). It describes a PHP Object Injection via PHAR Deserialization in rest_simpleTranscribeAudio and rest_simpleVisionQuery. Impact is limited unless a PHP Object Injection (POP) chain exists in another plugin/t...

Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2022-48303)

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...

vim: Vim path traversial

A path traversal flaw was found in Vim. Successful exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive...

EUVD-2025-81711

Malicious code in heath-tea-archive npm...

EUVD-2025-81889

Malicious code in flores-tea-archive npm...

Malicious code in pete-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6ce2d08d1ea692303e0a036355b4e58514e011c56c24183f74a27a0076b36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81479

Malicious code in jacobs-tea-archive npm...

EUVD-2025-82480

Malicious code in cochran-tea-archive npm...

EUVD-2025-81473

Malicious code in jeromy-tea-archive npm...

Malicious code in leonard-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a47cf3cfb8296867e4c8654c28fe9e57c0aac86074d3b40e4c02fe2635481b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorsey-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80683

Malicious code in rodrick-tea-archive npm...

EUVD-2025-81251

Malicious code in melody-tea-archive npm...

EUVD-2025-82359

Malicious code in cook-tea-archive npm...

EUVD-2025-82281

Malicious code in darrin-tea-archive npm...

Malicious code in ayala-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7438732a1417e4fa58968765ec3723d623c31bef66dd5e0f6e35be036d159a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clark-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea19685a16fcc4a79d2d300a82c9eace9e35fb566f306b7156a0a0324a93c010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in francesca-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42911edb69c06a96b86be1308a7eb5e37ace0a3551f11f0d1d266c8c2142d006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...