MAL-2025-50020 Malicious code in candra-tempe33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78d4e755c9c0a7efdce38edb06dde36a38dacbc5b906cd4b286a2993c120c05 The package candra-tempe33-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50639 Malicious code in vera-peyek48-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6073fc534b9a7e2b4290fa0d2034adaff35af8c0318c03f6123f1ca7394143c The package vera-peyek48-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in budi-lutis24-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d13fc402164427836b71b307792739dcfa8bc667b7d46b87d1951a6cbe526b The package budi-lutis24-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50089 Malicious code in cindy-keripik40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a666b8d392dfd806b471245acdea4c2f6b7a2deb5e55e8313bbac184d8e948 The package cindy-keripik40-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50405 Malicious code in fajar-sambel40-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca9c6587d4d84daa0288c9a84982392a9c855b6a8cf36859ca1f253ffe07361 The package fajar-sambel40-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50408 Malicious code in fajar-tomat64-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b55c53a1ab6430aac9453f8cad40e6aabd3b80e0760b5347422b020f016e1e The package fajar-tomat64-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

编号撤回

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2025.3.104432, which...

Oracle Linux 9 : osbuild-composer (ELSA-2025-19594)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19594 advisory. 132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIR...

PT-2025-46157

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description A missing VCS URL validation in JetBrains YouTrack allows delegation to unauthorized repositories through the Junie widget. This issue affects versions prior to 2025.3.104432...

MAL-2025-49620 Malicious code in yanti-brengkes77-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd8c69a43df9dd9bfacffa3e182abc79ff26e4e88f21e007dcff4d8ae3fbe50 The package yanti-brengkes77-tititugel was found to contain malicious code...

Exploit for Reachable Assertion in Open5Gs

Open5GS-CVE-2025-41067-CVE-2025-41068-PoC This repository cont...

CLSA-2025-1762536892 git: Fix of CVE-2024-32020

CVE-2024-32020: refuse local clones of unowned repositories to prevent TOCTOU race conditions...

Malicious Package

Overview SqlDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Acunetix_vulnerability_assessment_tool

Acunetixvulnerabilityassessmenttool !imagehttp...

Soft Serve does not sanitize ANSI escape sequences in user input

Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...

GHSA-FV2R-R8MP-PG48 Soft Serve does not sanitize ANSI escape sequences in user input

Impact In several places where the user can insert data e.g. names, ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. Places in which this was found: 1. Repository...

CVE-2025-64109

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...

GO-2025-4024 Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows

Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows...

GO-2025-4002 Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd...

CVE-2025-64109

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP Model Context Protocol server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in ...