SUSE CVE-2025-40131

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12kdpmonrxdelivermsdu In ath12kdpmonrxdelivermsdu, peer lookup fails because rxcb-peerid is not updated with a valid value. This is expected in monitor mode, where RX frames bypass the regular ...

PT-2025-46779

Name of the Vulnerable Software and Affected Versions SureForms plugin for WordPress versions prior to 1.14.0 Description The SureForms plugin for WordPress is susceptible to sensitive information disclosure in versions up to and including 1.13.1. This is a result of the auth callback parameter...

Linux Distros Unpatched Vulnerability : CVE-2025-40183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 10.11.3 and prior to 10.11.x and 10.5.11 and prior to 10.5.x. The vulnerability stems from a failure to properly validate team member permissions,...

Impact of Domain name or Hostname Change on Veeam Appliances

Challenge After changing the FQDN of a Veeam Appliance--either by adding it to a domain or changing its hostname--some operations may be impacted. Solution SAML Authentication May Stop Working After the host name of the Veeam Software Appliance is changed, the Service Provider SP information will...

Malicious code in itale-dci-rrusysyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42093684a00b5d297d4b3b23901d99c50a178355920d27359621806336f66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-aloinalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f1205e59dc44f36ddb82dc35382403d48ceb7c77ba6ed18626576e0ca12a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-os-afisigafaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b957bb54e50e683488f27387e494f4373f6997ef33f42c5a2164012b3d2ce19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-akif-dalimkunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6011c890b389e1e1a0d7ee46fe730f0ff3e13300f6d3505d75a4ea4405e3e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76694eb9d3d7e264fe4203567c7b6e33889cbb33fbbf262173a9ed2111d9db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tgacav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bcc6949785852eaa9cb9ece8206116a337b83963cad8b8c2c0e1a7dce49b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ai-avuhusiaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f6455840f2464ef30d292a58254401350d08748a1bd05c8670ca3b70c9d4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-guga-vii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48712e04e02936314b5cf39ced8900086678c89861904641f71828473917dee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugiay-ajvog-dnie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a266b60094c2c1e7cec6f1156328ed576850b7dab91e91b515a5cf4fcd2e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uga-agugrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eecf3e109f12a4ee140bf213080dcfdfcbb729de5b1fbff52c692ea9651240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoldai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da01fc76fd9c43d237e1a120804971c39e4982c9fc60362ccaf5467e591e8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-inlutag-idosao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc89f15eb16eb7ea8dbaf4833eebd01ecd4b783a51996369fe679ee201573a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182841 Malicious code in itale-adci-ggmatondnggangru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b7c3bd65e3cd649ae60800ae0002f713a8f749539326c582b2f589693530d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181689 Malicious code in astam-ifukilsit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd312f77cf708a116b5d75778fcb51d6bd206d45f04ca79f8a6893f998c128c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184740 Malicious code in oloc-yg-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad297d01c85dcf88cf00d8a2120c0e31a17046e1d1c36088b184406c11ae8d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...