Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990921 advisory. In the Linux kernel, the following vulnerability has been resolved: ubi: fastmap: Fix duplicate slab cache names while attaching Since commit 4c39529663b9 slab: Warn...

CVE-2025-11454

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

Malicious code in tunis-kt-gahuvfadduufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4af6ecee38feb7087634ecc70575f123b3f8511cf9970fa459accd4b96834f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131933

IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking...

EUVD-2025-131947

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code 'Code Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

MAL-2025-176968 Malicious code in nurrrrrrr-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14af7fb87dc5c654623f22c986a5cb43f82ad74beed141af49ac93c5e7a82ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171440 Malicious code in kampas-kopling (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be16c37e9ef4ac9eef6e8383eff9f0553e1bb677b808332dddf7b154004c866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab960ca3aeedc2b2b2fa221be8b075fa8e8357718d7b3fa447ac18f14ecc7065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155919 Malicious code in ican-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedaab83d95904a4ab2c2689ada140fa5027d623630d6f20958cf3e08069cdb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124905

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

PT-2025-46647

Name of the Vulnerable Software and Affected Versions The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress versions through 0.5.5 Description The plugin is susceptible to SQL Injection due to insufficient escaping of user-supplied parameters and...

WordPress plugin Specific Content For Mobile – Customize the mobile version without redirections SQL注入漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin...

MAL-2025-126248 Malicious code in erwin-kripik72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a81c3552a407c208fabe87a0ea6a5d00c8c3caf65a7471cb19282f905b74e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasi69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75eaba79cb8f8a18a156de138f620346288914d89686d539b0f30e02dd14de70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-donat31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c04b1bfd30b8938c08255d0d50ef7b14b2ef13a00cbda035feb63a10fcd65ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-gembus92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897ff3d6f030dbc420f7a563fcd7696ace211bfee7c1d684bf5c9227c856a051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

kernel: ring-buffer: Validate the persistent meta data subbuf array

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

Malicious code in helpless_salmon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d0094720ad284fc2ec0d2391240fd651ed89bdfee6a9ccf6b032953c691a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95595 Malicious code in natural_blackbird_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629ed979e3b01aa58c06d6b9379548119871e0e60c2eacd1c9219dbc51463553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5185215589098cb199e1a2d78df775792e9ed7b5e93ca8a5ae52c01b6d42a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...