14542 matches found
CVE-2025-12869
The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load...
aEnrich a+HRD 安全漏洞
aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A security vulnerability exists in aEnrich a+HRD that stems from authentication abuse and could allow an unauthenticated remote attacker to send specially crafted packets to obtain administrator access...
aEnrich a+HRD 安全漏洞
aEnrich a+HRD is a full-service human resources development solution from Acer China aEnrich. A security vulnerability exists in aEnrich a+HRD, which stems from authentication misuse and could allow an unauthenticated remote attacker to forge an administrator access token and elevate privileges t...
PT-2025-46573
Name of the Vulnerable Software and Affected Versions aEnrich a+HRD affected versions not specified Description The a+HRD software contains an authentication issue that allows unauthenticated remote attackers to create administrator access tokens. These tokens can then be used to gain access to t...
Malicious code in riana-kue22-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa68403d1f9abd1de8cbd9250b65778a0897a86439ea057c2f1d141a756f813b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riana-tek6-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aece64ee807cf61837add4f6f08be3074521337b63e42ef9b1f49f4ad4efd2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-127223 Malicious code in hissing_antlion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4be41fd3c2c1842edfb8f6fb52f5c2040fe9b5167bb8bb9eec5c6caa45dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-129784 Malicious code in riana-rangi75-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9df436688374cb43afc6227eaa4be33cce45f1eeeb8c721785b9fc24b4bb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riana-gorengan1-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96939d7141320dc30f055957e5d0a4b9478006afe4cc968e8c6dd2a8951d2a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-108011 Malicious code in riana-getas82-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eca9b101118dd5e4fa9a6daece4aea3aca7bae6a580780e2acb9174290391e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riana-ragi93-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761b63de8c6f75e682d850d7b317b06c0d8ddeb00b8fb7adc079c6b1ba86d1ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in patria-sate100-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad0523dab361527fdf966b2cd9df2c3748028f7269c6c7864199e6aa98ac7325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dono-tek38-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6246ce058d23e49393e076b199e827a5080d8f460e5b1b3a704da4b93c46c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riana-kupat73-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ddc1359ccb55c21f09b72d2e5a5bf1c9ec919662ecb22f4af42ae85a0fc66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in crucial-red-quokka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8cc5ae80c7bbd1c226867c96be67aa5906952ada4802a6ac6358a4399a4dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riana-getuk51-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddfddfadc23cdea59a8f75949c26db28173c788ae79da9e1abffcacfd5715e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riana-pecel12-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3032f19f380cd8a0a83ea7b646e0d70d77f584e2734a1b9a2fdafda8193666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in riana-mangut44-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf2b2256442b707ff1aee9cda3b46831a2bbe72a9a864ad757c6fde92750fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
