Linux Distros Unpatched Vulnerability : CVE-2025-40127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is...

EUVD-2025-131963

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service DoS via crafted JSON Web Encryption JWE token with an exceptionally high compression ratio...

CVE-2025-64280

CVE-2025-64280 affects CentralSquare Community Development 19.5.7. The vulnerability is a SQL injection through the permit_no field caused by unfiltered input in the application, with CVSS v3.1 base score 9.8 (CRITICAL). The impact targets confidentiality, integrity, and availability. No exploita...

EUVD-2025-131952

A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarmony.asp' endpoint. User-supplied input to the 'TXTUSERID' parameter is not properly sanitized before being incorporated into a SQL query. Successful authentication may lead to...

PT-2025-46602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the hardware random number generator hwrng and the ks-sa driver. A division by zero error occurs in the ks sa rng init function due to an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990828 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Avoid excessive partition lengths Avoid mounting filesystems where the partition would...

Malicious code in yearning_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a48b830f498238daaf2d03194a512196d2bc9850bb5cd16557ffaf35554ea2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655172b8caf5862373934d5939eca653ef26074b4ba1b988b5fc7b1eb00a8d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-ragi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cf5f991a619de7928ec641f2683d8197461a354bae5a52a78dcaeb2159982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-mendoan26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123657a4cbc5ae763c61f7613d6c141d83ed8cd60c1f2aea01e7acf7a01fe1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-sego27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb8e3e60c1cab51a08b3d4a6b11f3dbd09f1ada34200cbc7b5dc8ee2ef8009f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f288cba31c7536ebf6b16e33e6825eaebcd7405ecda10416c23a74ba5887b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-keripik50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448eacbd16a700aab5d9dd3b51b288c09296ef95174661344e909ed8256e0fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-bubursumsum79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59ba459e6185bcc20d91b6d10de29d23242497bd8ef2ed0e4c943a62becad46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-semur62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fcd558d90b166a331cf7e676202ac4a73bb400b1b0f76ea24df3edb2f740a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-serimuka49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a13a22c6a4b743926290ec1cc06487790d63c4c3cfa3f2149cd159c098a44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in numerous_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f84508971369158b3419623b82179d16ff5c26ace09ff21e20d7db5d704670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-mie89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0e223fcc3668ad3c4abfa737eeed77fc74c0f1fc1a51a43690d625a7e1478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-mangga46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bc09abfd4f55a96810d78740153e7f937a6083c90277823f67e13af82a6f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcd025857003959154abb04e64f5dfefbafd8160f1612fe464407cc0c343502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...