CVE-2026-4932: Insufficient Entropy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption TME hardware to decrypt encrypted memory due to insufficient cryptographic entropy...

Malicious code in tme-xca-react (npm)

The tme-xca-react package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a 'tme' internal...

Malicious code in tme-xca (npm)

The tme-xca package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a 'tme' Travel Mall /...

EUVD-2024-54376

Malicious code in bioql PyPI...

CVE-2024-45557

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation...

CVE-2024-45557

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation...

CVE-2024-45557: Use of Out-of-range Pointer Offset

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation...

Malicious code in tme-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4741bb4c7fbbe8d2acdca3ca368d5690922a5129bdbe01ed573aebee6f4514f The OpenSSF Package Analysis project identified 'tme-finance' @ 5.7.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1197 Malicious code in tme-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4741bb4c7fbbe8d2acdca3ca368d5690922a5129bdbe01ed573aebee6f4514f The OpenSSF Package Analysis project identified 'tme-finance' @ 5.7.7 npm as malicious. It is considered malicious because: - The package...

Papouch Backdoor Account / CSRF / Missing Authentication

+++++ Vulnerable Products 1. Papouch TME Ethernet thermometer 2. Papouch TME multi: Temperature and humidity via Ethernet All versions affected TME - Ethernet Thermometer http://www.papouch.com/en/shop/product/tme-ip-ethernet-thermometer/ TME multi: Temperature and humidity via Ethernet...