Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2025-2364)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-45da53cabc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in personal_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c85c16d187e5cbbf0b8b23fd0c771209856007eea7f6b88ca58e9dc39be0d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-rawon68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc090ed52d55fdbc323c43e1384c7d5e561eeda021800203f69cc4065f5672c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133060 Malicious code in eko-sambel36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eafa5e39c232c2f3c3306d88e6cf29b95ade187636341fea0c1765622fda417d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129027 Malicious code in ocha-gorengan6-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91699d4c14662e29837bd5596e957bc2939b6be60c8bfe3d167ed73992f31dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kupat13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9507743fe6d94ae5f9a90c7dfd113c5ae1d842f125f89cfdb4dc95f5db3ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-jengkol6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf132791de236969a1e23153cf90f1079dc7085c6f1c88c91275d981642847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 10. Please updateBug Fixes and Enhancements: Update .NET 10 to RC 1 rhel-10.1.z JIRA:RHEL-114571 Update .NET 10 to RC 2 rhel-10.1.z JIRA:RHEL-121558 dotnet10.0: .NET Denial of Service Vulnerability rhel-10.1.z JIRA:RHEL-120611...

Vulnerabilities fixed in Microsoft Visual Studio

Microsoft has fixed vulnerabilities in Visual Studio and Code Copilot for Visual Studio. A malicious party could exploit the vulnerabilities to bypass security measures and execute arbitrary code in the victim's context. For successful exploitation, the malicious party must trick the victim into...

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed a vulnerability in SQL Server. An authenticated malicious party can exploit the vulnerability to use specially prepared SQL statements SQL Injection to grant themselves elevated privileges and thus gain access to sensitive information that the malicious party is not initially...

Vulnerabilities fixed in Microsoft Dynamics

Microsoft fixed vulnerabilities in Dynamics The vulnerabilities are in Dynamics 365 On Premise and Dynamics Field Service and allow a malicious person to access sensitive data, or impersonate another user. Microsoft has made updates available that fix the described vulnerabilities. We encourage y...

CVE-2025-60727

creationtimestamp| type| source ---|---|--- 2025-11-11 17:30:42+00:00| seen| https://www.thezdi.com/blog/2025/11/11/the-november-2025-security-update-review 2025-11-11 17:31:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0359 2025-11-12 08:07:30+00:00| seen|...

CVE-2025-12943

CVE-2025-12943 involves NETGEAR RAX30 and RAXE300 devices, where improper certificate validation in the firmware update logic lets an attacker who can intercept and modify traffic potentially execute arbitrary commands on the device. Affected products: NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400...

MAL-2025-112851 Malicious code in bayu-toge80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833bc39c1e912991435f609aec660eef5e130e09462b5f90b714f39e5d916de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee56ac729d192f8d5b74bff4fa6e7c7510a33a207fa8c14d4fcaefe9319946f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wicked_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad9d9defeef6935b20518bf6e2ef05cd8527734f78e2d17c1fc7be1c29c8abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108622 Malicious code in sheer_stingray_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc61bcd567e345d59f6b80dc5c07a6169f405f9e4a863071a4a9f6ef78855a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101139 Malicious code in cuddly_roadrunner_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d48e45c5d73ef11388a4922089fde6e3eb457b1ddec4e28aabdcd2072966caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99889 Malicious code in bella-donat86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ee719365468a412ee75c94219dc70287cad31ecd572ae28421988156d56bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...