4881 matches found
MAL-2025-189788 Malicious code in sync-vega-apex-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7049cee782d42510430e26832fb304bb48636354de220eb85f797b763b0df0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188489 Malicious code in outercore-sync-fornax-lightyear (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e2e853eda7b0af152340f61eb4696e8f76559b416699655d34aa888bfc5f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2023-60056
Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service,...
ROS-20251113-01
A vulnerability in the Omnibox component of the Google Chrome and Microsoft Edge browsers is related to writing outside the boundaries of the buffer. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges A vulnerability in the Safe Browsing compone...
DEBIAN-CVE-2025-40196
In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...
CVE-2025-40196
In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quotareleasework There is a kernel panic due to WARNONCE when paniconwarn is set. This issue occurs when writeback is triggered due to sync call for an opened fileie, writeback reason is...
Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security
Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies. AD's importance has grown as companies adopt hybrid and cloud infrastructure, but so has its complexity. Every application, user, and device traces back to AD for authentication and authorization, making ...
CVE-2025-40140 net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netifwakequeue in rtl8150setmulticast syzbot reported WARNING in rtl8150startxmit/usbsubmiturb. This is the sequence of events that leads to the warning: rtl8150startxmit netifstopqueue;...
Malicious code in rimraf-sync-koa-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121494
Malicious code in sync-telesto-configstore-javascript npm...
EUVD-2025-116314
Malicious code in avior-sync-enif-protractor npm...
EUVD-2025-115947
Malicious code in buffer-gatsby-less-sync npm...
EUVD-2025-111801
Malicious code in less-json-sync-readable npm...
EUVD-2025-121721
Malicious code in spinner-node-config-sync-grus npm...
Malicious code in airbnb-colors-sync-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc7d0428c018b9d34e73281aa3acd0df3ba2771cef2f568249f03b9b919a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115069
Malicious code in config-sync-stream-jasmine npm...
EUVD-2025-121497
Malicious code in sync-relay-rocket-scripts npm...
EUVD-2025-121496
Malicious code in sync-rigel-prettier-stylelint-concurrently npm...
Malicious code in carina-rate-limiter-perseus-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de077fa85a8aac069d8b85948635a847e137b4cec30da3ac961db323496c642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...