28870 matches found
Malicious code in buta-fadsg-vfsfgun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3919c8e29ba9bf882553d2e0cb7269f827308da1ac250be1ace3123576a8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-178223 Malicious code in rindaman-poke59 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a995d1a6757c2d89c4c418f9cc1cbc74a342cf0837b45fea09176f13199ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-131910
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through 4.0.0...
CVE-2025-59499
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
Malicious code in avomainah-fras-ofafau (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799c1ad4ae1b70b0aea0225d7f5565dd9940cbfd28ef0a1995d25c2bfa1c846b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-162134 Malicious code in nokire-abimanyu22 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032337113d550b869ee3ef9faef1afdb91b9bcc8f9fbc66a2403bac8e9ff21ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-11700
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-12905
Inappropriate implementation in Downloads in Google Chrome allowed a remote attacker to bypass Mark of the Web via a crafted HTML page...
CVE-2025-13047
CVE-2025-13047 affects the ViewLead Technology Bacteriology Laboratory Reporting System. The vulnerability is a SQL Injection that allows unauthenticated remote attackers to inject arbitrary SQL and read database contents. Root cause and exact vulnerable component are described as an injection fl...
EUVD-2025-119986
Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
EUVD-2025-113114
Malicious code in graphql-chakra-ui-luna-proxima npm...
EUVD-2025-113115
Malicious code in graphql-chai-schema-elara npm...
EUVD-2025-111328
Malicious code in meissa-alphard-xanadu-graphql npm...
MAL-2025-146148 Malicious code in phoebe-dactyl-hydra-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15069d6c517ba07a6ed22a9fc3941b90f3ed7cd9171a1029f4f45dd9c8976e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145853 Malicious code in ophiuchus-yildun-centauri-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfef0efd2ab36909c134870761c4a8cc9e6ade31076e09fbccc65c28fef81b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122291
Malicious code in sagitta-xml-child-process-loopback npm...
EUVD-2025-113328
Malicious code in galaxy-andromeda-non-blocking-xml npm...
Malicious code in pino-pretty-antares-wolf-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6395df5bc3336a6a4d7f56b89b2d327305c12579b282ae41a212ad7b8aa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
One Signature, Multiple Payments: Demystifying and Detecting Signature Replay Vulnerabilities in Smart Contracts
Smart contracts have significantly advanced blockchain technology, and digital signatures are crucial for reliable verification of contract authority. Through signature verification, smart contracts can ensure that signers possess the required permissions, thus enhancing security and scalability...