MAL-2025-125321 Malicious code in casual_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fbf203f0b97f06d8cfb2580afba631f195b148cc2718a530160cc20569b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121865 Malicious code in mixed_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec2bd7081689ed05e28cbe6f538f7a18db295b00a10de42460778a5451a8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sasag2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc139812da74a10222faab76102e5abbad355922d98f6fbd80315dcd4a515ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gepuk35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0268e86e3e932ef43666416419299cd2f828159eca5ce76ce87598f6cdc57bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-naget97-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392d290bc03505ebb67c2b6cfece8007fae1c0b482cace46a1a25e05897b68a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103692 Malicious code in hendra-rangi53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461d5714423c7ee8e3e4282c354cb498b389df98276d8059b2150275bc04cf6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107150 Malicious code in positive_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7a8097d066b33898650edcda8c8b707c9717f99b45c3c9f02958db91b1b48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97382 Malicious code in willowy_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83febdaf6bf7c2b024cd588a1ab5a47e19a2b05c3e261574d98eee2d168e72bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95069 Malicious code in intelligent_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5024eec4c81ec031d40647f8838cc601e17cf0057cd0f0c8fae5068427beb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74300 Malicious code in mahesa-oblok18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972700934330fbcaaeb8ba223e4e99353e8947c3953abd107e5297953413b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-salmon-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3246680bbd074dc58285a221f35e5d20727fd2ba14b9f06103a2ed14592e824b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66015 Malicious code in vina-rawon69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf68db031223ab7bd9b45177d2a58855fad6dff0a92bc8d0421b620dc4ce115a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-12865

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents...

EUVD-2025-38732

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-12864 e-Excellence｜U-Office Force - SQL Injection

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents...

EUVD-2025-38733

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2022-50590

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of t...

CVE-2023-7322

Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability. Users who lacked the required API permission were nevertheless able to invoke API endpoints, resulting in unintended access to data and actions exposed via the API. This incorrect authorization check coul...

CVE-2025-59461 API does not require authentication

A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services...

CVE-2025-53058

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Application Logging Interfaces. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...