Intel QAT 安全漏洞

Intel QAT Windows software refers to the collection of Intel® Data Protection and Compression Acceleration Technology software components that provide support for the Windows operating system. The Intel QAT Windows software has a buffer overflow vulnerability that originates from a buffer overflo...

PT-2025-46380

Name of the Vulnerable Software and Affected Versions Intel VTune Profiler versions prior to 2025.1 Description A flaw exists in Intel VTune Profiler that may allow an escalation of privilege. An unprivileged software adversary with an authenticated user and a low complexity attack may enable dat...

CVE-2025-12919

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...

CVE-2025-43079

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges...

Malicious code in governing_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588289189718432160b8f306b7695ca6b683fddee132ec923dfbd3537f14c674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60486 Malicious code in flexible_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9553f1d1f3f80c6e6f0e62592f60db9d394c1b87bd7edaa344e3298e5e7774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61567 Malicious code in varied_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e32a8bf536316e295e9789d024cb197e67f4449db3c5afdee2a7b5c5ffd186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf0540b0fedbd8106e999664e4336860b6fb49b8c07de13b3236581b7324dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbab9d2c09c1f305ada32c2446129005a22a86538c5672e8d192f424e1bd243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d863f968dc886cc9fd45a57b58a891b798afc81007213802aee677fa46caefad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198598fee1faff0c3cdba3b17186c57812feb48ff5adcfb0b0eff9ad21a63528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5c477bc1d3e500aa14e7c9a026cb947eb40f3c23cfd03b3244ee0298ce130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60164 Malicious code in consistent_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f356ac3bb620efb4c870f6ece0296e1793d9673c8a85f6b548b84adb06ad0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60601 Malicious code in hilarious_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac26f2d009641adf1308f0dc1eaaffb648828c1ca4dc2766ca0f398fa2b491d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60568 Malicious code in grand_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51090528a6f3b2b6e28a4b146cbd0ea7a3fdea9740810cb0332a870c13bef629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51090528a6f3b2b6e28a4b146cbd0ea7a3fdea9740810cb0332a870c13bef629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60474 Malicious code in final_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5219578b76a2cf0c76e7e92fcf0f72ce771f8fdea56fc6d59de589c4061d170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60442 Malicious code in exuberant_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01486ad7ef747c86539a50d2a6ecdc152260f792640a47d0260290092e76de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61423 Malicious code in sure_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2f719904e925ea19d749777a38930c1b1b521b9e455b2b947083dce6103860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60652 Malicious code in impressive_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bf2f93955dc8d83156018bc47f282330a740fbe69ad1d890582e66b41ba419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...