CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-66911

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-66911: Improper Access Control

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status query functionality. The handleQueryUserOnlineStatusesRequest method in UserServiceController.java allows any authenticated user to query the online status, device information, an...

CVE-2025-13125 IDOR in Im Park's DijiDemi

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

CVE-2025-13125 IDOR in Im Park's DijiDemi

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

SUSE CVE-2022-50654

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix panic due to wrong pageattr of im-image In the scenario where livepatch and kretfunc coexist, the pageattr of im-image is rox after archpreparebpftrampoline in bpftrampolineupdate, and then modifyfentry or registerfentry...

Im Park DijiDemi 安全漏洞

Im Park DijiDemi is an educational software from Im Park Turkey. A security vulnerability exists in Im Park DijiDemi version 28.11.2025 and earlier, which stems from a user control key leading to an authorization bypass that could exploit trusted identifiers...

CVE-2022-50654

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix panic due to wrong pageattr of im-image In the scenario where livepatch and kretfunc coexist, the pageattr of im-image is rox after archpreparebpftrampoline in bpftrampolineupdate, and then modifyfentry or registerfentry...

DEBIAN-CVE-2022-50654

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix panic due to wrong pageattr of im-image In the scenario where livepatch and kretfunc coexist, the pageattr of im-image is rox after archpreparebpftrampoline in bpftrampolineupdate, and then modifyfentry or registerfentry...

CVE-2022-50654

CVE-2022-50654 is a Linux kernel vulnerability fix. The available connected documents describe a concrete flaw: when livepatch and kretfunc coexist, the pageattr of im->image can be rox after arch_prepare_bpf_trampoline in bpf_trampoline_update. If modify_fentry or register_fentry returns -EAG...

CVE-2022-50654 bpf: Fix panic due to wrong pageattr of im->image

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix panic due to wrong pageattr of im-image In the scenario where livepatch and kretfunc coexist, the pageattr of im-image is rox after archpreparebpftrampoline in bpftrampolineupdate, and then modifyfentry or registerfentry...

Malicious code in diva-banubo-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fde7deaca2bd545b0732fdc5b7650338fd0cb2f46d0f2e425a1b96acdd0f6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugai-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712906bd9c2b054aceae4d1367cd7dc3bf7c869aa54912b0643382c42da39bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafbai-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106bb5808ac47583f453bb85bd6e2964a44649d0656ab9b8e141375110d47cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-142331

Malicious code in diva-tugafai-im npm...

EUVD-2025-142323

Malicious code in diva-tugafbai-im npm...

EUVD-2025-142318

Malicious code in diva-tugai-im npm...

EUVD-2025-142365

Malicious code in diva-banubo-im npm...

EUVD-2025-142405

Malicious code in diva-banib-im npm...

MAL-2025-173898 Malicious code in diva-banib-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78a4b4d47e2dea035868c5c1ae44606bf6ebf3e17f0c5f3a0df53b7966c204f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...