517 matches found
MAL-2025-146871 Malicious code in pyxis-charon-neptune-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556ddeb88bf7a9fddf1bae3466a20bdfd45f4c606551a5622a2d5157c1b8e689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148334 Malicious code in style-loader-neptune-taurus-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a4c90da9164ea2ee6d2e60d2ac1a6098266e9489620764bc8ce379afa7aed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143395 Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147177 Malicious code in rehype-neptune-buffer-cassini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99f96519afc0372b2dea505b8c770086ade6f53b8d09c6710009b159b9c71f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141551 Malicious code in deneb-neptune-pulsar-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146338 Malicious code in polaris-equinox-envconfig-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6a382237b08b549bc7eda0f326619bb3126d3117d0fa08b614a2f7c628fc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-34283
Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value...
EUVD-2025-37214
Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value...
CVE-2025-34283
Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value...
CVE-2025-34283
Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value...
CVE-2025-34283 Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes
Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value...
CVE-2025-34283 Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune Themes
Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value...
CVE-2025-34283
Nagios XI (pre-2024R1.4.2) contains an information-disclosure flaw where an authenticated user without API privileges could view API keys via Neptune themes. Affected component is the API key handling exposed to Neptune-themed views; root cause details are not fully described in the provided docu...
PT-2025-44521
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2024R1.4.2 Description Nagios XI versions prior to 2024R1.4.2 had a flaw where API keys were exposed to users lacking the necessary API access permissions when utilizing Neptune themes. An authenticated user, even...
Neptune Rubikon Banking Solution 安全漏洞
Neptune Rubikon Banking Solution is a banking services platform from Neptune UK. A security vulnerability exists in Neptune Rubikon Banking Solution version 4.0.3, which originates from the presence of reflective cross-site scripting in the Search For Customers Information endpoint...
EUVD-2008-1291
Malware in sbrugna...
Malicious code in spica-neptune-geodynamo-hugo (npm)
The package spica-neptune-geodynamo-hugo was found to contain malicious code...
Malicious code in webdriver-manager-neptune-mensa-cosmicray (npm)
The package webdriver-manager-neptune-mensa-cosmicray was found to contain malicious code...