MAL-2025-153938 Malicious code in bufpani-mau-nanuayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8584cc3b41fafcaa7b7967ff4600e3085d5017adc1a9018c61065f398d4e1845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-naayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd7883394dd2fa5065403b80d724d948fed149496764fe6a83b349918ad8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bf26377b96e31fbdd8e6d7a25cbe3486e7e3ca9861797fb64fff8d26366a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nmafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8acd7280a499bfdeaab658d456d94962bc84d5bbc35d0b78ba27fab1ba1a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159067 Malicious code in mahnud-mau-nama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cf96e428bd531968b24c7496b73eada47528963956ba3055833b19fa791a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159072 Malicious code in mahnud-mau-namasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89fc41f84d18c51ee0cdffc9b9d9a935908168198935ea7aa03f1b84d44c92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153930 Malicious code in bufpani-mau-nafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9e2bd2e1d52cf173d15f9299809f8ed6753a171af4ab75f9d4531c41200f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9e2bd2e1d52cf173d15f9299809f8ed6753a171af4ab75f9d4531c41200f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-55317: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

CVE-2025-47968: Improper Input Validation

Improper input validation in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

CVE-2025-29800: Improper Privilege Management

Improper privilege management in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

CVE-2025-24036: Time-of-check Time-of-use (TOCTOU) Race Condition

Microsoft AutoUpdate MAU Elevation of Privilege Vulnerability...

CVE-2025-21360: Improper Privilege Management

Microsoft AutoUpdate MAU Elevation of Privilege Vulnerability...

CVE-2024-43492 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

...

mau-autovermietung.de Cross Site Scripting vulnerability OBB-2803766

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-0984

CVE-2020-0984 affects the Microsoft AutoUpdate (MAU) application for Mac. The root cause is improper validation of updates before execution, allowing an attacker who can run code locally to place a crafted executable in a location used by MAU and escalate privileges by executing code with elevate...

PT-2020-2240

Name of the Vulnerable Software and Affected Versions Microsoft AutoUpdate MAU for Mac affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Microsoft AutoUpdate MAU application for Mac. It occurs due to improper validation of updates...

CVE-2018-8412: by MS Office for Mac Legacy Package to provide the right-vulnerability warning-the black bar safety net

Note: a patch has been released, please will you MAU upgrade to 18081201 ! Microsoft Autoupdate Helper 3.18180410 + legacy SilverLight insecure installer package EoP Scope of impact: Microsoft Office for Mac 2016 and SkypeForBusiness（16.17.0.65） This report relates to two main defects: 1. Code...

CVE-2016-7300

CVE-2016-7300 affects Microsoft Auto Update (MAU) for Mac. The root cause is an untrusted search path and improper update validation that lets a local attacker place a crafted executable to execute code with elevated privileges. Impact is local privilege escalation; public exploits exist and were...

Mau mau! - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Mau mau! published at the 'play' market has multiple vulnerabilities...