MAL-2025-49799 Malicious code in arif-gado-gado30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58540da2d607d304dfa831da8d5f55e68e24be394d315fb0a91e8bde0db6833a The package arif-gado-gado30-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50741 Malicious code in ade-kue47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f92e67763ddd9f03b417171d252c6eab6091e10259d1607c6fa7789c1c80f4 The package ade-kue47-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm...

MAL-2025-49903 Malicious code in bella-keraktelor28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3ce1a959c7d95606b1370e7e6a8ecb6c2c9972c60426c7d89520527c041eaa The package bella-keraktelor28-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2011-0486

Malware in sbrugna...

EUVD-2017-6295

Malware in sbrugna...

EUVD-2018-19405

Malware in sbrugna...

EUVD-2020-18739

Malware in sbrugna...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

SUSE CVE-2011-0466

The API in SUSE openSUSE Build Service OBS 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a 1 package or 2 project via unspecified vectors...

GHSA-8823-XPHR-QW9V Gentoo Portage does not verify X.509 certificates from SSL servers

The urlopen function in pym/portage/util/urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate...

cPanel Protection Mechanism Bypass Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A protection mechanism bypass vulnerability exists in versions of cPanel prior to 88.0.13. An attacker can exploit this vulnerability to bypass the protection mechanism that restricts package modifications...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

Authentication flaw

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

CVE-2020-26109 affects cPanel prior to version 88.0.13, where a protection mechanism intended to restrict package modification can be bypassed (SEC-557). The public documents consistently describe a bypass vulnerability enabling modification of packages despite the protection. Affected product: c...

CVE-2020-26109: Undefined Security Weakness

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

PT-2020-16292

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.13 Description The issue allows bypass of a protection mechanism that attempted to restrict package modification. Recommendations For versions prior to 88.0.13, update to version 88.0.13 or later to resolve the...

CVE-2017-14806

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...

CVE-2017-14806: Improper Certificate Validation

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...