EUVD-2025-54737

Malicious code in dynamic-coral-caribou npm...

MAL-2025-67912 Malicious code in dynamic-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898cc20dac207be5f5e597c66540510fd4de37910630900b6c2a9491a94a3a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67914 Malicious code in dynamic-yellow-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72866532a591ceca911e5adf31814d696f73588e0f1bdd2776227b70b3e03ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68699 Malicious code in hon-fuchsia-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2cdfcfa5deb6fe70944c94c3e46145425120e6f3ce50826efc688c1da5d490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic-olive-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a312a549ce57a2f1344e09eb3c1c7d4fecbf5f3de25a30bf2010d7605a0e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54735

Malicious code in dynamic-yellow-koala npm...

EUVD-2025-54736

Malicious code in dynamic-olive-quail npm...

EUVD-2025-54740

Malicious code in dynamic-amaranth-planarian npm...

EUVD-2025-54739

Malicious code in dynamic-azure-gerbil npm...

Malicious code in dynamic_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0be82e339884d218c57d8edb77bc0d03618d84848837a041866fe45cfd908fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ALSA-2025:21038 Important: kea security update

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

PT-2025-48905

Уязвимость графического редактора Adobe Illustrator связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

RHEL 10 : kea (RHSA-2025:21006)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21006 advisory. DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers...

ROS-20251111-10

Vulnerability of processsymtab function of eu-readelf component of ELF Elfutils binary modification and analysis utility is related to copying buffer without checking input data size. ELF Elfutils is related to buffer copying without checking input data size. Exploitation vulnerability could allo...

Siemens Software Center and Solid Edge

SUMMARY Siemens Software Center and Solid Edge is affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system. Siemens has released new versions for the affected products and recommends to update to the latest...

MAL-2025-55961 Malicious code in dynamic_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50afd86a7d9d7b2902bb1a5dc41a7820b662201e0b4093660ec22a100b8947a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-48014

Malicious code in dynamicwombatz3n npm...

Advisory ROSA-SA-2025-3066

Software: dhcp 4.4.2 OS: ROSA Virtualization 3.0 unaffected versions = dhcp-4.4.2-19.b1.rv30 affected versions dhcp-4.4.2-19.b1.rv30 CVE-ID: CVE-2021-25217 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A software vulnerability providing the DHCP Dynamic Host Configuration Protocol service to the network is...

AlmaLinux 10 : expat (ALSA-2025:19403)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:19403 advisory. expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing CVE-2025-59375 Tenable h...

Advisory ROSA-SA-2025-3044

Software: dhcp 4.4.2 OS: ROSA Virtualization 3.1 unaffected versions = dhcp-4.4.2-19.b1.rv31 affected versions dhcp-4.4.2-19.b1.rv31 CVE-ID: CVE-2021-25217 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A software vulnerability providing the DHCP Dynamic Host Configuration Protocol service to the network is...