278285 matches found
MAL-2025-167155 Malicious code in teagood-manaki86 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41865f5d9b2efb9b7cefdd6ca13f6e5fa7d7312ee9a17131396039f0f3ccaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153685 Malicious code in billa-35 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015a65e5f189cead34be4a53a7f7a0a43ab39845214b031cde11311d28bb8077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-169780 Malicious code in uinsnu-lotiupomi-kilabarm71 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d3a603b813b196fbe9b08f9c22364fe9c42f9c9a7a8606f7e4111278eb7920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-163989 Malicious code in parwo-poke2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346b225c378f3d2a7f8db5265c91605b98a7393cceef713d22a51c31299b6023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-160995 Malicious code in mursai-bduasrt-ssda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a3bb3d40df775d5bd7467e823a723ada5f9b089840510b33fbb70a2945c640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-158146 Malicious code in lina-poke60 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3454ffa355326537152e2c8d86ea50a99c1ec17fec128303f10a01f43374f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-164356 Malicious code in poli-akilu-lunak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b27b327fa653b4250c404248b3cfea580b06bea51eda4df1d9c343a374725b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in @miptaa02/ojeb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52668984226d075a697ae049030177628f2e38a21c72fff4025def15fd7a3648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in abang-poke18 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385349fe09696a89c21db68cf49ca78bbe9a97ecc18ecb7334820428a512cf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mansila-tdhfla-mafgsfdgghjhghla (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313a4f74e26e481785fa14edfeaaeebdf187683f6fe8bb9be8a5222252a0c5d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-11795 JPG File Parsing Out-of-Bounds Write Vulnerability
A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
CVE-2025-64280
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...
CVE-2025-11367
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11367 N-central windows software probe Remote Code Execution
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11367
The CVE-2025-11367 entry affects the N-central Software Probe (windows) prior to version 2025.4. The vulnerability relies on deserialization, allowing remote code execution with network access and no authentication. Impact is described as full compromise of affected systems (high confidentiality,...
CVE-2025-11367 N-central windows software probe Remote Code Execution
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities
CISA has released Emergency Cisco Directive 25-03 Implementation Guidance to assist federal agencies in addressing critical vulnerabilities in Cisco Adaptive Security Appliances ASA and Firepower devices. Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices, issu...
bind: Cache poisoning attacks with unsolicited RRs
A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...
Security update for runc
This update for runc fixes the following issues: Update to runc v1.3.3. Upstream changelog is available from . bsc1252232 CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 Update to runc v1.3.2. Upstream changelog is available from bsc1252110 Includes an important fix for the CPUSet translation for...