2901 matches found
EUVD-2025-144574
Malicious code in augis-pom9r-n npm...
MAL-2025-160897 Malicious code in munir-n-nubliesp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e3ab4d7b2a9cb8f5025fbc79e1c9d2658f22610b39e5397652d372ea7ddbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-160157 Malicious code in masako-males-n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ceac201a669ab5580d2d5eb02cad3fd744a6aa39459c4c411d4e4f43b68fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in munir-nautyt-n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689d55276275d8494e05a3ef1afd8b74ddfd019eae73b9f0b4ebb39ef594ced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sunden-diak-n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40132fe292c6ced8f8b02b1b856651fa8049ff8563cf392d64a3fd1479f70252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in munir-n-nubliesp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e3ab4d7b2a9cb8f5025fbc79e1c9d2658f22610b39e5397652d372ea7ddbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-9316
N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...
CVE-2025-11366
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11367
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11367
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11366
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11700
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-11700
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-11367 N-central windows software probe Remote Code Execution
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11367 N-central windows software probe Remote Code Execution
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11367
The CVE-2025-11367 entry affects the N-central Software Probe (windows) prior to version 2025.4. The vulnerability relies on deserialization, allowing remote code execution with network access and no authentication. Impact is described as full compromise of affected systems (high confidentiality,...
CVE-2025-11366 N-central Authentication bypass via path traversal
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11366 N-central Authentication bypass via path traversal
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11366
Summary: CVE-2025-11366 affects N-able N-central, versions prior to 2025.4, with an authentication bypass via path traversal. The issue enables bypassing login controls by manipulating file paths, exposing high-privilege access. Impact: high confidentiality, integrity, and availability risks may ...