EUVD-2025-179457

Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass npm...

EUVD-2025-175711

Malicious code in virtualreality-abiogenesis-passport-chalk npm...

Malicious code in restart-virtualreality-cli-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d5aa5bdd04a69e784a9117629e602322a901b83eca9fc9f548929ac2cf681d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175710

Malicious code in virtualreality-algol-loglevel-nebula npm...

EUVD-2025-175709

Malicious code in virtualreality-biotechnology-standard-chakra-ui npm...

EUVD-2025-177448

Malicious code in ophiuchus-blueshift-virtualreality-acamar npm...

EUVD-2025-178892

Malicious code in firebase-helios-bionics-virtualreality npm...

EUVD-2025-175707

Malicious code in virtualreality-gatsby-brane-lynx npm...

EUVD-2025-175706

Malicious code in virtualreality-paleoecology-nova-zooarchaeology npm...

EUVD-2025-176654

Malicious code in restart-virtualreality-cli-spectron npm...

EUVD-2025-175729

Malicious code in version-virtualreality-scorpius-wezen npm...

crypto: hisilicon/qm - request reserved interrupt for virtual function

...

EUVD-2023-60056

Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service,...

PT-2025-46855

A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit...

CVE-2025-20355: URL Redirection to Untrusted Site

A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit...

CVE-2025-20341: Improper Access Control

A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by...

PT-2025-46922

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1 Description The NIM server service formerly known as NIM master – nimesis – may allow a remote attacker to traverse directories on the system. An attacker could send a specially crafte...

Linux Distros Unpatched Vulnerability : CVE-2025-40152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separategpudrm modparam The drmgemforeachgpuvmbo call from...

PT-2025-46924

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1 Description The nimsh service’s SSL/TLS implementations in IBM AIX and VIOS are susceptible to improper process controls, potentially enabling a remote attacker to execute arbitrary...

PT-2025-46921

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1 Description The software stores NIM private keys used in NIM environments in an insecure manner, making them susceptible to unauthorized access by an attacker employing man-in-the-midd...