Malicious code in laila-lapis89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9887d049d32a823dd1546d98e827615601edbdc857468c3b3778440c310ff78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52017 Malicious code in hadianto-bakwan24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad43e19601936ecd86a1ba9b68f7f906ee4f689ef156c582c83cecc24640c055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53241 Malicious code in laila-sate1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acea7b7710fc008dea7019354386eeda14eb6aeec89687a3b248368aeb0e8f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-sambel9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b81da59dfbf322794fbff80c4f2ba3bb2355b054a0ac24455b513cef6ddd337 The package vida-sambel9-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-49801 Malicious code in arif-gudeg6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1fb001c3c1dd77cf3f97c9bc0134a6a7260722660b945f044f2886b070e81d The package arif-gudeg6-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in citra-tek81-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ac77e6a879af246b9e8d3d7d691dd300bb600da8b6e15859c6d247781a2a46 The package citra-tek81-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-50167 Malicious code in citra-soto63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e854b934b4c44f2bd191901a1418d12ede95dc45353ec2cc64909667533e3992 The package citra-soto63-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50180 Malicious code in dewanto-enting100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a665fc58c92a7ac5c3b63c273561383f8235b8a8218dc161ba9e385f0a261efd The package dewanto-enting100-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-383837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-383837 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d wait for itself to clear MDSBCHANGEPENDING Xiao reported that...

SUSE SLES12 Security Update : regionServiceClientConfigGCE (SUSE-SU-2025:03171-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03171-1 advisory. - Update to version 5.0.0. bsc1246995 - SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16...

Security update for regionServiceClientConfigEC2

This update for regionServiceClientConfigEC2 contains the following fixes: Update to version 5.0.0. bsc1246995 SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16 when it gets released. Update dependency to accomodate metadata binary package name...

Security update for regionServiceClientConfigEC2

This update for regionServiceClientConfigEC2 contains the following fixes: Update to version 5.0.0. bsc1246995 SLE 16 python-requests requires SSL v3 certificates. Update 2 region server certs to support SLE 16 when it gets released. Update dependency to accomodate metadata binary package name...

Linux Distros Unpatched Vulnerability : CVE-2025-4138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You...

UBUNTU-CVE-2024-12718

Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

CVE-2025-4138

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

CVE-2023-1597

The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves ...

kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING

A vulnerability was found in the Linux kernel's md/raid5 implementation within the raid5d function. This flaw can cause a deadlock when handling I/O operations due to a conflict between the reconfigmutex and the MDSBCHANGEPENDING flag, leading to excessive CPU usage and denial of service...

SUSE CVE-2024-39476

In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d wait for itself to clear MDSBCHANGEPENDING Xiao reported that lvm2 test lvconvert-raid-takeover.sh can hang with small possibility, the root cause is exactly the same as commit bed9e27baf52...

AZL-43282 CVE-2024-39476 affecting package kernel for versions less than 5.15.162.2-1

In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix deadlock that raid5d wait for itself to clear MDSBCHANGEPENDING Xiao reported that lvm2 test lvconvert-raid-takeover.sh can hang with small possibility, the root cause is exactly the same as commit bed9e27baf52...

WordPress Plugin Frontend File Manager Security Bypass Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security bypass vulnerability exists in the WordPress plugin Frontend File Manager, which is caused by a lack of authentication protection,...