PT-2026-1261

Name of the Vulnerable Software and Affected Versions AA-Team Amazon Native Shopping Recommendations versions through 1.3 Description The software contains an Improper Neutralization of Special Elements used in an SQL Command issue, which allows for SQL Injection. The issue does not require...

CVE-2025-28973

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...

EUVD-2025-206071

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0...

CVE-2025-28973

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...

CVE-2025-28973 WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...

CVE-2025-28973

Summary of CVE-2025-28973: The vulnerability is a Path Traversal flaw in the WordPress plugin “AA-Team Pro Bulk Watermark Plugin for WordPress” (also referred to as Pro Bulk Watermark Plugin for WordPress) affecting versions up to 2.0. The root cause is insufficient sanitization of user-supplied ...

PT-2025-54444

Name of the Vulnerable Software and Affected Versions AA-Team Pro Bulk Watermark Plugin for WordPress versions through 2.0 Description The AA-Team Pro Bulk Watermark Plugin for WordPress contains a path traversal flaw. The issue is due to insufficient sanitization of user-supplied input,...

PT-2025-54445

Name of the Vulnerable Software and Affected Versions AA-Team Amazon Affiliates Addon for WPBakery Page Builder versions n/a through 1.2 Description An issue exists in AA-Team Amazon Affiliates Addon for WPBakery Page Builder formerly Visual Composer that allows for SQL Injection. This occurs due...

CVE-2022-50860

The CVE-2022-50860 issue affects the Linux kernel's AppArmor subsystem. After the commit a1bd627b46d1, the hname member of struct aa_policy becomes an invalid slab object and cannot be freed by kfree_sensitive(); the fix is to use aa_policy_destroy() to properly free the resource, preventing a me...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not freeing resources using aapolicydestroy, which could lead to a memory leak...

EUVD-2025-204880

Malicious code in @aa-techops-ui/ping-authentication npm...

aa-charlink (>=0.1.1 <=1.0.0), aa-drifters (=0.1.0a0) +510 more potentially affected by CVE-2025-64460 via django (>=4.0.0 <=4.2.26)

django PYPI version =4.0.0, =0.1.1, =1.0.0, =0.1.0a0, =0.11.0a0, =0.1.1, =1.1.0, =0.1.0, =0.0.3, =4.0.9.0, =65.10.0, =65.10.3 and more Source cves: CVE-2025-64460 Source advisory: SNYK:PYTHON-DJANGO-14157807...

Malicious code in lobac-ubb-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ce6fd1c582a2dc4c18581b402f29347c8029e0b1c5981f1870b3c75aa6879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134475

Malicious code in kisut-fafunig-aa npm...

EUVD-2025-134476

Malicious code in kisut-fafunig-aa npm...

Malicious code in poglymer-ogih-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a05b39bb4a2c4dbe9b4650f9f0c8c0fafe9e842f3b124928f61fff9b6b52e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138694

Malicious code in polymer-aa-aahai npm...

EUVD-2025-138949

Malicious code in poglymer-ogih-aa npm...

Malicious code in polymer-aa-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528bdabfe278db5172816c7d221509d3494b22056b8c85d171e4453e74377875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892476635ea943b5e6907bf6df9d4c0a507668bdb7e7fa659e4dc4cb7957fdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...