18447 matches found
Malicious code in nokire-korean7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44da7f41c13b93c664031c124ce911cfefb39c18b18b341c619a9704d58308e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ruji-7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4350175403fdd1744791d44379eb8c7e494911072446816895d1d0f9d8e18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153722 Malicious code in billa-7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bb7b55ae3cbd07c027db486292f4bda7f1191b87a3231f32c6dc65354a80d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aji-7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d44aa26ffb77eb5953b027522bd77219e2646ba4526412189e551e4c832c4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rita-7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd5a909ba139710c4e1e21cc4ba8963597a7f2a6676bc0b7f2e171f75cc588f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aril-7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 237d62158f75fcadbb2221954397122b6805bb61fbf9c4ff2c558901b1efa90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-147506
Malicious code in trevora-fissa-cir7 npm...
Malicious code in alvira-27 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c26c826170fba3a34b0251b1c073ff0bd3b75ed0b50639a445fd035c3a7b0f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ruji-37 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153c67275750824a26b85661d1658b500f7713eee0bd9249c67691997d0cb48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-146239
Malicious code in wulan-7 npm...
EUVD-2025-146261
Malicious code in wulan-27 npm...
Malicious code in icha-7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d069d3f05aeb7610f0d0cfb7c6f0a7e9e80f5133cff7ee3aa23b6a20137b8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153798 Malicious code in bintang-tea7 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518e2d2465ea0912a1f3172508480259c474ecabd1662c6c7a1beaa5ea21e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-11084
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period...
Security Bulletin: IBM QRadar SIEM is affected by improper storage of credentials in configuration files
Summary IBM QRadar SIEM is affected by improper storage of credentials in configuration files in source control. IBM has addressed the issue in the latest update. Vulnerability Details CVEID:CVE-2025-33119 DESCRIPTION: IBM QRadar SIEM stores user credentials in configuration files in source contr...
BIT-OAUTH2-PROXY-2025-64484 OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation
OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions prior to 7.13.0, all deployments of OAuth2 Proxy in front of applications that normalize underscores to dashe...
CVE-2017-20210
Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research...
RHSA-2025:20955 Red Hat Security Advisory: redis:7 security update
Bulletin has no description...
CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...
