Malicious code in candra-nasipecel95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056dbdaaf452904cd925c052e42ba36b5ff80072406f5b0f8d900aee01eb763c The package candra-nasipecel95-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in tiara-tempe32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9a9a69fdab1566eccfc53f327b132c17a55741a1d41b38c124ca30483be0 The package tiara-tempe32-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in vida-dradag16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97d9cb91234f32ec7159c04d5a7ddc9a1b7e0ffd82c6820673e69ce32f52364 The package vida-dradag16-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in fitri-lapis50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42945b901753747a076545611c6c459c49f62b8441787d7197cf001e24432262 The package fitri-lapis50-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50255 Malicious code in dono-ikan17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cace6ca7b1b40a8f6af750940cbf9fd7af8e6a271aa73ef37621b6dab9fa035 The package dono-ikan17-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50911 Malicious code in bambang-otak-otak8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc06cb209149c91a78ee89ee29b9c62dd5bc532eb1d0bc9658bf5dca6390a9e6 The package bambang-otak-otak8-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50299 Malicious code in eko-jamblang57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80021e0df5a691836a1f7745833652e83e3c510730f0e2a9685817314aa295c The package eko-jamblang57-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51575 Malicious code in dian-soto23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0512716b939164ce0ecf871f47da7929e4fee880820aec19c546bc2fdfe496f3 The package dian-soto23-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-49870 Malicious code in bayu-nasi97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c27ec70fb658615b05a3286a119cc1cd184b415844a3165a18d33ef8649a97 The package bayu-nasi97-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

CVE-2025-12115

The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9. This is due to the plugin not disabling the ability to name a custom price when it has been specifically disabled for a product. This makes it...

CVE-2025-12115 WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration

The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9. This is due to the plugin not disabling the ability to name a custom price when it has been specifically disabled for a product. This makes it...

CVE-2025-12115

CVE-2025-12115 affects the WordPress plugin “WPC Name Your Price for WooCommerce” (versions up to and including 2.1.9). The root cause is that the plugin does not disable the ability to enter a custom price for a product when it has been disabled, allowing unauthenticated actors to purchase at lo...

CVE-2025-12115 WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration

The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9. This is due to the plugin not disabling the ability to name a custom price when it has been specifically disabled for a product. This makes it...

CVE-2016-15050

Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-supplied search parameters were incorporated into SQL statements without adequate parameterization or sanitation, allowing an authenticated user to manipulate database queries...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The product includes core banking, online banking, and estate management.Financial Services Analytical Applications Infrastructure is one of the financial services analytical applications...

CVE-2025-61941

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...

CVE-2025-36730

A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions...

EUVD-2025-34529

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...

CVE-2025-61941

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...

EUVD-2025-34144

An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code 'Code Injection'...