Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves

Summary A vulnerability was identified in the evervault-go SDK’s attestation verification logic that may allow incomplete documents to pass validation. This may cause the client to trust an enclave operator that does not meet expected integrity guarantees. The exploitability of this issue is...

MAL-2025-155564 Malicious code in hafiz-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29279a8610c1d3df05680eb9d25da9f4adad974763f039cab998daa0fbdedefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PrintWorkflowUserSvc Privilege Escalation

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PrintWorkflowUserSvc Privilege Escalation

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PrintWorkflowUserSvc Privilege Escalation

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PrintWorkflowUserSvc Privilege Escalation

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PrintWorkflowUserSvc Privilege Escalation

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PrintWorkflowUserSvc Privilege Escalation

The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-11892

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could lead to privilege escalation and unauthorized workflow triggers. Successful exploitation requires an attacker to have...

Description of the security update for SharePoint Server 2016: November 11, 2025 (KB5002805)

None None...

Description of the security update for SharePoint Server Subscription Edition: November 11, 2025 (KB5002800)

None None...

Description of the security update for SharePoint Server 2019: November 11, 2025 (KB5002803)

None None...

Malicious code in yanti-mendut35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d8d58c95bfeaf10f83dbb60570d822a2579b7cc91f57aec5d60294293fa255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78c123a549e5d10b15de1eab2347b81198e47399b00741d0c864d41b851309b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68341 Malicious code in fiscal-red-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8452a9f856592e29f975f1346644eabf54a04d55b1d9122a6d09b32cd66ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50832

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could lead to privilege escalation and unauthorized workflow triggers. Successful exploitation requires an attacker to have...

CVE-2025-11892 DOM-based Cross-Site Scripting was identified in GitHub Enterprise Server Issues search allows privilege escalation and unauthorized workflow triggers

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could lead to privilege escalation and unauthorized workflow triggers. Successful exploitation requires an attacker to have...

CVE-2025-11892

GitHub Enterprise Server is affected by CVE-2025-11892: an improper neutralization of input leads to DOM-based cross-site scripting via the Issues search label filter, enabling privilege escalation and unauthorized workflow triggers. Exploitation requires user interaction and access to a target s...

CVE-2025-11892 DOM-based Cross-Site Scripting was identified in GitHub Enterprise Server Issues search allows privilege escalation and unauthorized workflow triggers

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could lead to privilege escalation and unauthorized workflow triggers. Successful exploitation requires an attacker to have...

CVE-2025-11892: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could lead to privilege escalation and unauthorized workflow triggers. Successful exploitation requires an attacker to have...