MAL-2025-50257 Malicious code in dono-kue7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3a4ff109c34241684974f5ff19bf4fdeb7467a18934ab57c516c9899934406 The package dono-kue7-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm...

MAL-2025-50951 Malicious code in bayu-gulai98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5371f2666077650bc17d5496f0f4fdd9d1331e2c084b289b5f5c000507db9d The package bayu-gulai98-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in eka-kolak14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be02e97433c20b166cf84e7206f78e2b63fa5853b755f31dfd212e0a55f1585 The package eka-kolak14-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bella-mendut95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643110e7ced19ef5d9d47252e341f9ef3d3254a96fd3e3214d8cd48ad65cce11 The package bella-mendut95-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in utomo-kentang88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd00d241b247f7665f217fcf9e4c342930b1ea2100a513134ae51b301b0a88f The package utomo-kentang88-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in dono-klanting33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b3918ae95822a88f4f16c0939fd2e79cde832e3b6a34091db428b8278e8ea7 The package dono-klanting33-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50180 Malicious code in dewanto-enting100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a665fc58c92a7ac5c3b63c273561383f8235b8a8218dc161ba9e385f0a261efd The package dewanto-enting100-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51258 Malicious code in cici-empal70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c85a4d18989315b44b9597d6f39b477f2e441ec386b509f456da8841531489f1 The package cici-empal70-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50836 Malicious code in andi-takokak49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a35bcb3f4dc59af64d5b969b0d90fcdd89b90f9197b84562781b11397ef0d6 The package andi-takokak49-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

PT-2025-46162

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A Cross-Site Request Forgery CSRF issue exists in the application, potentially allowing an attacker to cause an authenticated administrative user to perform actions witho...

VulnCheck KEV: CVE-2025-53118

An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM...

CVE-2025-64143

Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...

Exploit for CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - Unauthenticated Sensiti...

CVE-2025-63691

In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface /api/admin/sys-token/page has an improper permission verification issue, which leads to information leakage. This interface can be called by any user who...

CVE-2025-63716

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Boldgrid W3_Total_Cache

CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability...

CVE-2025-63717

The change password functionality at /petgrooming/admin/changepass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks. The application does not implement adequate anti-CSRF tokens or same-site cookie restrictions, allowing attackers...

EUVD-2025-38291

In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface /api/admin/sys-token/page has an improper permission verification issue, which leads to information leakage. This interface can be called by any user who...

CVE-2025-63716

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints...

CVE-2025-63716

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints...