2529 matches found
MAL-2025-80389 Malicious code in ocha-rendang10-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4b2100f2b3d3afb837504c851e28a824be7af5419cd32395fddd860cfa1008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-74620 Malicious code in nina-papeda56-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696e74f915982c30805bfff9fea3fa9d8fc48105032864c499f6676f63696bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in reliable-bronze-silverfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67477320dd2c845859b97365f5cfeec24ed1a51d06462ef1d9540cb09b672790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in maya-taiwan91-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce60b5ae418f4c19ecacbda25572fdda44badeafb0c0d365ed29bb98e856f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in patria-miemee43-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e31720f32051fddb3985adc14caeb135c8845ca23c67658dbc8bd595368d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-7719
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5. and previous versions...
CVE-2025-7719
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5. and previous versions...
CVE-2025-7719 Smallworld SWMFS Arbitrary File Ops
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5. and previous versions...
GE Vernova Smallworld 安全漏洞
GE Vernova Smallworld is an asset and network management software from GE Vernova, USA. A security vulnerability exists in GE Vernova Smallworld version 5.3.5 and prior versions, which stems from improper pathname restrictions that could lead to file manipulation...
PT-2025-45472
Name of the Vulnerable Software and Affected Versions GE Vernova Smallworld versions prior to 5.3.5 Description A flaw exists in GE Vernova Smallworld on Windows and Linux systems that allows for file manipulation due to an improper limitation of a pathname to a restricted directory, also known a...
CVE-2025-64318
Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...
PT-2025-45034
Name of the Vulnerable Software and Affected Versions Salesforce Agentforce Vibes Extension versions prior to 3.2.0 Description An issue exists in Salesforce Agentforce Vibes Extension related to improper neutralization of input used for LLM prompting, potentially allowing manipulation of writabl...
PT-2025-45031
Name of the Vulnerable Software and Affected Versions Salesforce Mulesoft Anypoint Code Builder versions prior to 1.11.6 Description An issue exists in Salesforce Mulesoft Anypoint Code Builder related to improper neutralization of input used for LLM prompting, which allows manipulation of writab...
UBUNTU-CVE-2025-12207
A vulnerability has been found in Kamailio 5.5. This affects the function yyerrorat of the file src/core/cfg.y of the component Grammar Rule Handler. Such manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed to the public and may...
UBUNTU-CVE-2025-12206
A flaw has been found in Kamailio 5.5. The impacted element is the function rveisconstant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. It is still unclear if this...
CVE-2025-12206 Kamailio rvalue.c rve_is_constant null pointer dereference
A flaw has been found in Kamailio 5.5. The impacted element is the function rveisconstant of the file src/core/rvalue.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been published and may be used. It is still unclear if this...
Bdtask Pharmacy Management System 安全漏洞
Bdtask Pharmacy Management System is a pharmacy management system from Bdtask Bangladesh. A security vulnerability exists in Bdtask Pharmacy Management System version 9.4 and earlier, which stems from an incorrect manipulation of the file /user/edituser, which could lead to authorization bypass...
EUVD-2025-35947
Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...