26670 matches found
MAL-2025-96747 Malicious code in standard_manatee_requirement (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17add5606e3c6c3277ab0e39b25a4dcdc8e170428de22c6643a5d056b36e40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-73541
Malicious code in standardsnakez3n npm...
EUVD-2025-73543
Malicious code in standardmanateerequirement npm...
EUVD-2025-73542
Malicious code in standardparrotrequirement npm...
Security Bulletin: IBM Sterling Transformation Extender is affected by multiple IBM Java 8 vulnerabilities
Summary IBM Sterling Transformation Extender uses IBM SDK, Java Technology Edition, Version 8 and is affected by multiple vulnerabilities CVE-2025-53066, CVE-2025-53057, CVE-2025-50106, CVE-2025-30749, CVE-2025-30761 and CVE-2025-30754. Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An...
EUVD-2025-51828
Malicious code in standard-beige-swordtail npm...
EUVD-2025-51825
Malicious code in standard-pink-mockingbird npm...
EUVD-2025-51823
Malicious code in standard-turquoise-newt npm...
EUVD-2025-51826
Malicious code in standard-magenta-warbler npm...
MAL-2025-70823 Malicious code in standard-magenta-warbler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ec46b7fa77f3f6990dcd4526b605d858f99b96838acebaf60601fc21c082ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51824
Malicious code in standard-scarlet-wolverine npm...
MAL-2025-70824 Malicious code in standard-pink-mockingbird (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadb3cc284af7587bb8712587baa3ea36d65984a00c90af6140c257299a240e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51827
Malicious code in standard-lavender-jackal npm...
MAL-2025-65428 Malicious code in standard_crab_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73716856672681604eafee3e7dbab4588a80af44ee7a977eaef0abf904f3ebee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-57211
Malicious code in standardcrabz3n npm...
EUVD-2025-38159
Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxPrevalidationController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...
[SECURITY] Fedora 43 Update: rust-interpolator-0.5.0-3.fc43
Runtime format strings, fully compatible with std's macros...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990072)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990072 advisory. In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtprxrtssessionnew...
EUVD-2025-37597
The All in One Time Clock Lite plugin for WordPress is vulnerable to unauthorized access due to a missing authorization check in all versions up to, and including, 2.0.3. This is due to the plugin exposing admin-level AJAX actions to unauthenticated users via wpajaxnopriv hooks, while relying onl...