Intel CIP 访问控制错误漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an Improper Access Control vulnerability that can be exploited by an attacker to cause information disclosure...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an information disclosure vulnerability that stems from a protection mechanism failure, which can be exploited by an attacker to cause information...

PT-2025-46462

Name of the Vulnerable Software and Affected Versions Customer Experience Improvement Program CEIP affected versions not specified Description An improper access control issue exists within the Customer Experience Improvement Program CEIP. This allows a local attacker who is already authorized to...

Intel CIP 代码问题漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from an uncontrolled search path, which can be exploited by an attacker to cause elevation of...

QNAP Systems Photo Station 安全漏洞

QNAP Systems Photo Station is an online photo album from China-based QNAP Systems, Inc. It is used to organize multimedia content photos and videos on Qnap Nas. A security vulnerability exists in QNAP Systems Photo Station versions 5.4.1 and 5.2.7 that stems from a security issue related to the X...

Intel CIP 访问控制错误漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an Improper Access Control vulnerability that can be exploited by an attacker to cause information disclosure...

KLA90057 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, read local files, cause denial of service. Below is a...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from a protection mechanism failure, which can be exploited by an attacker to cause an elevation...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an information disclosure vulnerability that stems from mismanagement of privileges, which can be exploited by an attacker to cause information...

Intel CIP 代码问题漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP has a code issue vulnerability that stems from an unrestricted upload of dangerous types of files, which can be exploited by attackers to cause data tampering...

RHEL 10 : kernel (RHSA-2025:20095)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20095 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xen: Xen hypercall page unsa...

Malicious code in relevant_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8530f82c79c35f789c4ae4aef136cc40ea96e89e645ec4ad4654ba98ffb44359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61242 Malicious code in scientific_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c2fb2be8421d3a2efe974c826275e0bebc6ba12585bcf6b4b34a7d09c844f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-rawon7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beda998d3c80a7463c05c091a2bc2d9697cf5a5f9e229687f6e755098b24b233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57589 Malicious code in maya-peyek24-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3e62dba89557f1f12f6b7d770b11a363d9c04132bc9f8f3478f3475fbf3929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58383 Malicious code in riana-gembus66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7a1af8b03d6f8b902aace40b543963bd64d269bf8dd3256059333678bdc72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55211 Malicious code in andi-tumis33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef469c1914b445a02d05ce933efd96f062a16bf9b52f9a93dfd98ad277f0939e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59716 Malicious code in yuni-liwet34-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98e93a1f787a03f2dbc98b4cb22175919567c537210238e2afe4753ab819f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-sasag60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cfe78e65c3d0bb3b3ee1572dd610053a0a2c151fbc1260227d2e026de5e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

​​Securing our future: November 2025 progress report on Microsoft’s Secure Future Initiative ​​

When we launched the Secure Future Initiative SFI, our mission was clear: accelerate innovation, strengthen resilience, and lead the industry toward a safer digital future. Today, we’re sharing our latest progress report that reflects steady progress in every area and engineering pillar,...