2757 matches found
Malicious code in kentung-35 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ef01955e3e78ad3a34e9d32f88751272a44f127ca06440ee833dc0fc86c596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fadila-poke30 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff2f1e8f14c68bd2e9e0dcf8097521ac1f8ca529b640e07bdb2009d627df10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cinta-36 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a32af647cf2d2dd5d00f23c076ba1e70b9dc8f31e3fea96ac2640e287ea97dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dia-37 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d23e9ab0a91b585262833113ce9626c42e5818c0a589a89077cfabeddbedd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152476 Malicious code in alvira-36 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17419d42bc6d0c28d4950f1953de4ca0bcf8455ea56485621468a3a61e3a9630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153828 Malicious code in bitha-32 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6978835fcd8407fa3c5042bdd0fe1c4bf6ea7d53bb1644eacd9d68a275e8cc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-63289
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
CVE-2025-63289
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
CVE-2025-12732 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sensitive information due to a missing authorization check on the showsetting function in all versions up to, and including, 7.33. This makes it possible for authenticated attacker...
CVE-2025-12732
CVE-2025-12732 impacts the WordPress plugin “WP Import – Ultimate CSV XML Importer for WordPress” (versions
CVE-2025-63289
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
PT-2025-46579
Name of the Vulnerable Software and Affected Versions WP Import – Ultimate CSV XML Importer for WordPress plugin versions prior to 7.34 Description The WP Import – Ultimate CSV XML Importer for WordPress plugin contains a flaw that allows unauthorized access to sensitive information. This is due ...
CVE-2025-63289
CVE-2025-63289 affects the Sogexia Android App: Compile Affected SDK v35, Max SDK 32, with a fix in v36. The vulnerability arises from hardcoded encryption keys in the encryption_helper.dart file, which could impact data confidentiality and integrity. Remediation: update to SDK version 36 (or the...
PT-2025-46669
Name of the Vulnerable Software and Affected Versions Sogexia Android App versions SDK 35 through SDK 32 Description The Sogexia Android App contains hardcoded encryption keys within the encryption helper.dart file. These keys compromise the confidentiality of data encrypted by the application...
Malicious code in lina-ragi30-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9975f7dceb26cf05e6b6b11c530977bd81a6db356a03dd6dc342b11f2cf33890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-84334
Spoofing issue in Firefox. This vulnerability affects Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30...
2025-11 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5068781)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2025-11 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5068781)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...