database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

CVE-2025-13121 cameasy Liketea API Endpoint StoreController.php list sql injection

A security vulnerability has been detected in cameasy Liketea 1.0.0. Impacted is the function list of the file laravel/app/Http/Controllers/Front/StoreController.php of the component API Endpoint. Such manipulation of the argument lng/lat leads to sql injection. The attack may be performed from...

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

database/sql: Postgres Scan Race Condition

A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leadin...

EUVD-2025-158262

The AI Engine plugin for WordPress is vulnerable to PHP Object Injection via PHAR Deserialization in all versions up to, and including, 3.1.8 via deserialization of untrusted input in the 'restsimpleTranscribeAudio' and 'restsimpleVisionQuery' functions. This makes it possible for authenticated...

CVE-2025-12620

CVE-2025-12620 affects the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (versions up to and including 6.0.7). The root cause is insufficient escaping and inadequate preparation of the SQL query used with the filterbyauthor parameter, enabling an authenticated attacker ...

EUVD-2025-177251

Malicious code in perseus-query-halley-selenology npm...

Malicious code in perseus-query-halley-selenology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e110c96b540f872d651ac47fdfce3f49caac30f01ee4f9c559fcf0f20d03f753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-orbit-query-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143313a7ae8dac1e177b19d5f45c2056a89330f8ec31efee8e6eaba5a6c1f050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180139

Malicious code in balance-decompress-authorize-query-thread npm...

Malicious code in gemini-query-adonis-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88dc675516f0b833eb0fe5dc36d4860582128956738b97d038115774134b5bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176833

Malicious code in query-sed-hash-mu-link npm...

EUVD-2025-176674

Malicious code in resolvers-query-comet-radiant npm...

EUVD-2025-176834

Malicious code in query-relay-tethys-got npm...

EUVD-2025-176038

Malicious code in technocracy-spectron-webdriver-query-winston npm...

EUVD-2025-177462

Malicious code in omicron-query-air-cold-kappa npm...

EUVD-2025-176836

Malicious code in query-betelgeuse-nebula-dotenv-safe npm...

EUVD-2025-176171

Malicious code in stub-query-psi-throw-secure npm...

EUVD-2025-176386

Malicious code in sigma-query-interpret-phi-process npm...

MAL-2025-189656 Malicious code in star-route-query-export-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20beac557c34a749310f87e0f1b74f8044729c51c474177886ce1fc005f2d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...