EUVD-2025-56013

Malicious code in additional-amber-toucan npm...

Malicious code in additional-copper-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812ceae987943be1a55957836d51175c3abae7bc3c6dc793fda417401f143508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56009

Malicious code in additional-coral-tapir npm...

EUVD-2025-56010

Malicious code in additional-copper-lynx npm...

Malicious code in additional-orange-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20412ac8b48c05ef485d7d12ee5e870cedced47b4e14a6f36aa0b48210eb3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-coral-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e96f97a6e6e8f8887ac9e3a4d81e6862cfb105d5471195e540fdc5904a18bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56005

Malicious code in additional-red-crayfish npm...

EUVD-2025-56008

Malicious code in additional-indigo-orangutan npm...

EUVD-2025-56012

Malicious code in additional-black-pony npm...

EUVD-2025-56007

Malicious code in additional-jade-gull npm...

MAL-2025-61735 Malicious code in additional_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdbebf4926dfb7d6f1dcc0370166f1b74883546106b1b99cf589b2c059eab5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60904

Malicious code in additionalcranez3n npm...

EUVD-2025-50744

Malicious code in additionaldolphinz3n npm...

CVE-2025-43378

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

CVE-2025-43469

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

PT-2025-44835

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.2 Description A permissions issue existed that allowed a malicious application to potentially gain root privileges. This issue was addressed through the implementation of additional restrictions. Recommendations...

GO-2025-4035 Mattermost has a Missing Authorization vulnerability in github.com/mattermost/mattermost-server

Mattermost has a Missing Authorization vulnerability in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabili...

Exploit for CVE-2025-40778

CVE-2025-40778 Proof of Concept Educational demonstration of...

CVE-2025-12147 Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object

In Search Guard FLX versions 3.1.1 and earlier, Field-Level Security FLS rules are improperly enforced on object-valued fields. When an FLS exclusion rule e.g., field is applied to a field which contains an object as its value, the object is correctly removed from the source returned by search...

CVE-2023-7324

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addldescptr out-of-bounds accesses Sanitize possible addldescptr out-of-bounds accesses in sesenclosuredataprocess...