Malicious code in future_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae691631bf4ca04502c51883f3b31b117cb976ff8653ed1aaee7af4b29b961a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76794

Malicious code in futuremarlin-apptea npm...

EUVD-2025-79173

Malicious code in futurepinnipedz3n npm...

EUVD-2025-63906

Malicious code in futureopossumz3n npm...

Malicious code in future_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c49c3d1eb36584fdb15f618d65b9e82bc2e7d720273dcc415f7e725c8fe7096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebcce9259c5ec67bff100b11fa236ac71ce684976101d14a9b3aa60edf39966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54169

Malicious code in future-blue-koala npm...

EUVD-2025-54168

Malicious code in future-blush-crayfish npm...

EUVD-2025-54167

Malicious code in future-gray-opossum npm...

EUVD-2025-54166

Malicious code in future-teal-tapir npm...

MAL-2025-68483 Malicious code in future-teal-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b326b647334f84af5e3ed88b612469105b442e51e45ca8a5d8f93047851a7506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50139

Malicious code in futurevicunaz3n npm...

​​Securing our future: November 2025 progress report on Microsoft’s Secure Future Initiative ​​

When we launched the Secure Future Initiative SFI, our mission was clear: accelerate innovation, strengthen resilience, and lead the industry toward a safer digital future. Today, we’re sharing our latest progress report that reflects steady progress in every area and engineering pillar,...

When AI Becomes the Heart of Security: Powering a Future You Can Trust

Helping teams see clearly, decide wisely, and move safely...

CVE-2025-58152

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication...

CVE-2025-58152

The CVE-2025-58152 entry concerns Century Systems FutureNet MA and IP-K series devices. According to connected sources, the vulnerability involves exposing firmware version and garbage collection information on an internal web page, which can be accessed via crafted HTTP requests without authenti...

OpenVPN -- HMAC verification on source IP address ineffective

Arne Schwabe reports: Fix memcmp check for the hmac verification in the 3way handshake being inverted This is a stupid mistake but causes all hmac cookies to be accepted, thus breaking source IP address validation. As a consequence, TLS sessions can be openend and state can be consumed in the...

Enhancing Security in Deep Reinforcement Learning: A Comprehensive Survey on Adversarial Attacks and Defenses

With the wide application of deep reinforcement learning DRL techniques in complex fields such as autonomous driving, intelligent manufacturing, and smart healthcare, how to improve its security and robustness in dynamic and changeable environments has become a core issue in current research...

CVE-2025-60933

Multiple stored cross-site scripting XSS vulnerabilities in the Future Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...

CVE-2025-60933

The HR Performance Solutions Performance Pro software, specifically version v3.19.17 , is affected by multiple stored cross-site scripting (XSS) vulnerabilities within the Future Goals function. The root cause is the improper handling of input parameters, allowing an attacker to execute arbitrary...