EUVD-2025-138448

Malicious code in polymer-aia-afag npm...

EUVD-2025-138446

Malicious code in polymer-aia-afffag npm...

EUVD-2025-138443

Malicious code in polymer-aia-iaf npm...

EUVD-2025-138444

Malicious code in polymer-aia-gifgaf npm...

MAL-2025-177782 Malicious code in polymer-aia-afffag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e59125baff461bb22137eb1cd8f653371cf8f9b5d89fe3da9eb36955595117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177786 Malicious code in polymer-aia-ifgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642c2a0ae2b58c1ca4143eaec0e168ba80a5aaead4dd81567a0f3b4a2710ade2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177777 Malicious code in polymer-aia-afafafyag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddf33e01f0892dd07945df012160a0e785a29089fce05993e947c63322d7825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177780 Malicious code in polymer-aia-afag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cac1725c34727201bd20c6853922393b6953812f88fc064cc68a035d24e151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177778 Malicious code in polymer-aia-afaffag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1256a123bb81b7c94b4ea85834082f382a8cbe42378a1da235dcf0e78252b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2017-7135

Malware in sbrugna...

EUVD-2025-11162

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-15698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle field...

AZL-69640 CVE-2025-23135 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvmexit During a module removal, kvmexit invokes arch specific disable call which disables AIA. However, we invoke aiaexit before kvmexit resulting in the following warning. KVM...

DEBIAN-CVE-2025-23135

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvmexit During a module removal, kvmexit invokes arch specific disable call which disables AIA. However, we invoke aiaexit before kvmexit resulting in the following warning. KVM...

UBUNTU-CVE-2025-23135

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvmexit During a module removal, kvmexit invokes arch specific disable call which disables AIA. However, we invoke aiaexit before kvmexit resulting in the following warning. KVM...

Ubuntu: Security Advisory (USN-6161-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

aia-gubbio.it Cross Site Scripting vulnerability OBB-3254442

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2017-15698

When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates th...

MAL-2022-63 Malicious code in @aia-digital/request-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67340329fc557c52c46df3ed3cd53846a4151bed1d93e5f3fd8cfd116f6caf77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aia-digital/request-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67340329fc557c52c46df3ed3cd53846a4151bed1d93e5f3fd8cfd116f6caf77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...