2998 matches found
Malicious code in ita-31 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c374c976f5c5b3aa3d60dcfedd235a7a975cdc96b540e01fa7b3da5f8bb7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cinta-36 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a32af647cf2d2dd5d00f23c076ba1e70b9dc8f31e3fea96ac2640e287ea97dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-157597 Malicious code in keyla-poke30 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3765a44482cd50ae2101f98f3c2e7083faa151ab8f40ab3e8f69d33041f193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rita-34 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995a4fb627d4f8d0d281a75da404836f9af4b45c3ea06e8dafefbc6404bf9b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152476 Malicious code in alvira-36 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17419d42bc6d0c28d4950f1953de4ca0bcf8455ea56485621468a3a61e3a9630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153828 Malicious code in bitha-32 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6978835fcd8407fa3c5042bdd0fe1c4bf6ea7d53bb1644eacd9d68a275e8cc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-63289
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
CVE-2025-63289
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...
CVE-2025-12732
CVE-2025-12732 impacts the WordPress plugin “WP Import – Ultimate CSV XML Importer for WordPress” (versions
CVE-2025-63289
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
PT-2025-46669
Name of the Vulnerable Software and Affected Versions Sogexia Android App versions SDK 35 through SDK 32 Description The Sogexia Android App contains hardcoded encryption keys within the encryption helper.dart file. These keys compromise the confidentiality of data encrypted by the application...
CVE-2025-63289
The Sogexia Android App (a payment account management mobile application) contains a vulnerability caused by hardcoded encryption keys within the encryption_helper.dart file. This flaw compromises the confidentiality of data encrypted by the application. The issue affects versions from SDK 32 thr...
PT-2025-46579
Name of the Vulnerable Software and Affected Versions WP Import – Ultimate CSV XML Importer for WordPress plugin versions prior to 7.34 Description The WP Import – Ultimate CSV XML Importer for WordPress plugin contains a flaw that allows unauthorized access to sensitive information. This is due ...
Malicious code in lina-ragi30-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9975f7dceb26cf05e6b6b11c530977bd81a6db356a03dd6dc342b11f2cf33890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-84334
Spoofing issue in Firefox. This vulnerability affects Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30...
2025-11 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5068781)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2025-11 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5068781)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
CVE-2025-13014
A use-after-free vulnerability exists in the Audio/Video component of the Mozilla Firefox and Firefox ESR browsers, as well as the Thunderbird mail client. The flaw allows an attacker to access memory after it has been freed, potentially leading to service interruptions or, according to some repo...