CVE-2025-12113: Missing Authorization

The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgaideleteapikey function in all versions up to, and including, 1.8.3. This makes it possible for authenticated...

PT-2025-46602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the hardware random number generator hwrng and the ks-sa driver. A division by zero error occurs in the ks sa rng init function due to an...

WordPress plugin Alt Text Generator AI – Automatically generates and updates alt texts for images. Security vulnerabilities.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

RHEL 9 : bind (RHSA-2025:21110)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21110 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

Malicious code in gita-mangut47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d537026d69dab5819e714bab17c6d6f45efc3c0d65f1ff29634c7f19ceb821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126050 Malicious code in eka-telur66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e35778ffa6ff83d695598992a5b974abc6711474c910cb9cd95847c4270952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-nasiuduk58-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9400fd5e19283e1d12c8ee2b5b7dc082b644d55b9edd6e22fe8de496991e4909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126316 Malicious code in experienced_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a87b0356a4a1103c20d2455ffcaa049314fa31e36086a692cc0d0adb631e8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129604 Malicious code in putri-soto29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689a034d43565bfe8f22a91b09176ef3496097f0fa14a13bf10fa17852314f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118646 Malicious code in agus-lumpur45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ea1451f6040df4f82879027e0b8b506e8e3e8fd78debbe850bea10d17dbdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18ff432316b541804e1b0265ab1467aa34b10638c04bccd169ddaeb4f04aa98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123340 Malicious code in sound_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41aa25ca51a8b350937ed927a7724322879a7881d9c5841eac02c7c80d048a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gaplek88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15c62ffcaef6574be8d6f57293eef59d91e0b9169316fc655f21517667b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

bind: Cache poisoning due to weak PRNG

A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...

Malicious code in bambang-mangut34-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3503ec957b3af35a63a873bc2fa1ef8990df2d5425794754127106d6d406b420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-botok39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fd5c8997fbb243718852fcc8de4224825dfd67204333692e6645e258d96a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110230 Malicious code in urban_leech-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0dc80c4f4e86e1fc1ed861c288b907aefd75e3372da27c68f4002aff6135a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative_fish-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f606b88b3570d5f45ddb0ac16488f7553eed36fae3f6a5dadcfbfe05f33b6586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103505 Malicious code in hadianto-peyek97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d46e09361bba2a926c265374c536462f407897af5e22d038e1b5d8daca529dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...