Malicious code in utomo-gandul57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5421f55e84cf010810f07b448a60a96759b9522736b191854e0f8e0074fd9232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116581 Malicious code in putri-pecel76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eb004962d55ff3ae30a34d72a9549fadf99b691d1bffdda9a6d50f2dfc1d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72074 Malicious code in bayu-gado-gado33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247239b232ad3dee54876fd7fcc723d61be3b7dc3f112ef042424fc2304f35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-brengkes23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce223e80cf87b90ab05b64c3f92b03d839e0da0a55b509f5c6b3a0c0c8e3915b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60945 Malicious code in nosy_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd54fa23f771f27c1d4d7c0aacc28762b2ae2e0dbcdf16eda6761bb9e7846fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2017-7341

Malware in sbrugna...

EUVD-2020-6148

Malware in sbrugna...

EUVD-2025-19892

Malicious code in bioql PyPI...

MCP JSON Config Detected (macOS)

Binary data macosxmcpjsonconfigdetected.nbin...

CVE-2025-6072

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.Thi...

CVE-2025-6072

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.Thi...

CVE-2025-6072 Stack Buffer Overflow in MQTTCore

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.Thi...

CVE-2025-6072 Stack Buffer Overflow in MQTTCore

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.Thi...

CVE-2025-6072

CVE-2025-6072 affects ABB RMC-100 and RMC-100 LITE. The root cause is a stack-based buffer overflow in the REST interface when processing JSON configuration, enabling overflow of the expiration date field (and related CVE-2025-6074 flow). Impact cited includes potential denial of service and expo...

PT-2025-27816 · Abb · Abb Rmc-100 Lite +1

Name of the Vulnerable Software and Affected Versions: ABB RMC-100 versions 2105457-043 through 2105457-045 ABB RMC-100 LITE versions 2106229-015 through 2106229-016 Description: The issue is a Stack-based Buffer Overflow vulnerability. When the REST interface is enabled and an attacker gains...

CVE-2015-9431

The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x jsonconfigfiles or jsoncustomi18nconfig parameter...

[SECURITY] Fedora 40 Update: netavark-1.10.3-3.fc40

OCI network stack Netavark is a rust based network stack for containers. It is being designed to work with Podman but is also applicable for other OCI container management applications. Netavark is a tool for configuring networking for Linux containers. Its features include: Configuration of...

CVE-2022-21803 Prototype Pollution

This affects the package nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted...

Cross-Site Scripting (XSS)

timelinejs3 is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via unprotected Google Sheets or a JSON configuration file...

CVE-2020-15092 Stored XSS in TimelineJS3

In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with maliciously crafted content in a number of data fields. This risk is present whether the source data for the timeline is stored on Google Sheets or in a JSON configuration file. Mos...