MAL-2025-69104 Malicious code in legislative-salmon-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dd4312e77856d6b2d574d8d54e83a57b2192f65c242a9b75618cc5755fbfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-soto10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8fee0368e83a3233b390be4fd5fcc259ba2c7caf917ba2e38b7f9e1acc12b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gaplek7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89236ae9bbccdbae179d14f6fa45096e723cbc73e87ae2282c36970bc50c69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37850f314684cbf1fcbac5e785c20402286bbf01cebfaf32a9b7761286ecabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60652 Malicious code in impressive_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bf2f93955dc8d83156018bc47f282330a740fbe69ad1d890582e66b41ba419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2024-19375

Malicious code in bioql PyPI...

CVE-2024-21761

An improper authorization vulnerability CWE-285 in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload...

Stored XSS in front/dashboard_helpdesk.php

Description Under the super-admin view, when adding a card to a dashboard, some more parameters are sent when the POST request is made. Those parameters later constitute an HTML div section in the response body. It is possible to modify the request, inject one of those parameters value which will...

SUSE CVE-2018-1129

A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel ar...