CVE-2025-61075

Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out administrative functions and manipulate data of other users via unauthorized API calls...

CVE-2025-61075

The adata Software GmbH Mitarbeiterportal version 2.15.2.0 is affected by multiple Incorrect Access Control vulnerabilities. These flaws allow remote authenticated users with low privileges to perform administrative functions and manipulate data belonging to other users by making unauthorized API...

PT-2025-54573

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the JavaScript engine V8 used by the Google Chrome browser. This issue relates to incorrect security checks during the processing of standard elements. Successful...

CVE-2025-41742

The CVE-2025-41742 entry concerns Sprecher Automations SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3. Affected components are the system’s cryptographic keys, with a root cause described as the use of default cryptographic keys that can be exploited by an unauthorized remote attacker. Consequences s...

ROS-20251124-11

A vulnerability in the Libraries component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK and Oracle Java SE software platform is related to access control weaknesses. Exploitation of the vulnerability could allow an attacker acting remotely to impact data integrity...

SAP NetWeaver Enterprise Portal Data Access

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform SAP NW EP is related to improper elimination of special elements in data requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read and modify data...

EUVD-2025-198066

A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the vi...

SAP NetWeaver Privilege Bypass

The vulnerability of the SAP NetWeaver software integration platform is related to errors in privilege management. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read, modify, or delete access to confidential data...

MAL-2025-183671 Malicious code in manu-oi-gisg1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1552eb8c34c4f3b20aaade8fc8b25211d13be55f2101452766998878853d8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-nusafa-nfigasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7ea5af768ec487dee01cd9b642a79c75402088ff9d4b853f3274e0e1540e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koko-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4e0300c13c2602470e67f97910db22e22df755551c6f0583e85e3e50353ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igono-jimafagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a74f8a828114439eed682db5964cb55f4f185418efe6f8db3374c669c5a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162780 Malicious code in nokire-lokcek27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c588ddfa3dfb2120daec0188c11ba2c83d26b2f2f0fe31d38a73572f22e9ea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uaao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8620cee44193be21fced47c27dd843523534bced4e450b7a45468263208b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162736 Malicious code in nokire-kore6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e5163be3c431d6b19c5b3e335cc58e8305bd96e9c39d67f2e88ee35a9a97ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170506 Malicious code in verify-tayic-iamsunasiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9e162f9407023789b23cd1f5e8c525e95932485f297672a2c04bf22782c7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135709 Malicious code in nadia-tempe47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e95998a9fd51b9944968365c3f5c4bc7ea686e88e2d99e285792a308c27247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136075 Malicious code in okta-toge82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b35a46ff0d4ee0c291bc872aad721bb3ba5eddc6c59780fc11221342ce9ca7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125321 Malicious code in casual_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fbf203f0b97f06d8cfb2580afba631f195b148cc2718a530160cc20569b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-dodol49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126072ae8a0c1f27a51d9bb81cf687b8974a388baf664561e1d1feee0b118264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...