198 matches found
EUVD-2026-106283
Vulnerability in the Oracle HRMS Republic of Korea product of Oracle E-Business Suite component: Korean Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS Republic...
CVE-2026-83360
Vulnerability in the Oracle HRMS Republic of Korea product of Oracle E-Business Suite component: Korean Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS Republic...
CVE-2026-83360
The Oracle HRMS (Republic of Korea) product, specifically the Korean Payroll component within Oracle E-Business Suite , is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially le...
Oracle E-Business Suite: CVE-2026-83360: Critical Patch Update
Vulnerability in the Oracle HRMS Republic of Korea product of Oracle E-Business Suite component: Korean Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS Republic...
Malicious Package
Overview @stockrepublic/republic-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
CVE-2026-61254: URL Redirection to Untrusted Site
Vulnerability in the Oracle HRMS Republic of Korea product of Oracle E-Business Suite component: Korean Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HRMS Republi...
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
A new cyber espionage campaign codenamed Operation Dragon Weave has been observed targeting officials and citizens in the Czech Republic and Taiwan to deliver an AdaptixC2 agent. According to Seqrite Labs, targets of the campaign include government, research, academic, technology, and financial...
Malicious code in @stockrepublic/republic-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300b309644b646817c47a283d8b9aaa018e8ae0f59986207f55fd0c39dca872a The package masquerades as an internal @stockrepublic component version 99.0.0, description 'Runs git diff and saves the output to git.log on install...
MAL-2026-4289 Malicious code in @stockrepublic/republic-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300b309644b646817c47a283d8b9aaa018e8ae0f59986207f55fd0c39dca872a The package masquerades as an internal @stockrepublic component version 99.0.0, description 'Runs git diff and saves the output to git.log on install...
Newly Discovered PowMix Botnet Hits Czech Workers Using Randomized C2 Traffic
Cybersecurity researchers have warned of an active malicious campaign that's targeting the workforce in the Czech Republic with a previously undocumented botnet dubbed PowMix since at least December 2025. "PowMix employs randomized command-and-control C2 beaconing intervals, rather than persisten...
PowMix botnet targets Czech workforce
Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call "PowMix." PowMix employs randomized command-and-control C2 beaconing intervals, rather than persistent...
MAL-2025-172878 Malicious code in ananda-poke21 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84ebf3760efd3b0282a2ac03639d84b45d18c3044348d3e33d7c390746b997b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sedna-cypress-dagda-slidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9480eb72fd64424dc78d7a68c04b3407ef3bb591d0550aee3bb1b56a326f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-138892 Malicious code in negative-blue-orangutan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b670c40380986d1f3afaedb7e8abf666e8256b430c191986c1063b53f0a299a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in organisational_spider_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dewanto-klentik7-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff91d00571803d968387057f3ec27ff52e3ded83c7f024bc2559da76edaf8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-113632 Malicious code in eligible_egret_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83e08b1afc66ab14b01fcfc760a3880c5257d1c4a38355a60544c661a02ed5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in suitable-amethyst-peafowl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa32d0ceee5cfc2f37ea2039e1b7951de93a72e91abf374b496d2e7635fff328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-55744 Malicious code in dangerous_fly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb89e1a289a1933d27ac623f1b946069f189875cc364090a555d08ddec779dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...