MAL-2025-52602 Malicious code in vera-gudeg88-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6450fe41692879c7713122900bb50f79fb1d1bf9524967ecfde704b95eda73f3 The package vera-gudeg88-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-52636 Malicious code in vida-klentik13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c519b5c26202e6bcd224226577cdb2af5d3fad2fde7457b7ac08d1bcc6a52fc9 The package vida-klentik13-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50150 Malicious code in citra-mie96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ba90d5eb12e44b1910e97593f9b8ce5b81d5d9401cb3f384860d50ff206172 The package citra-mie96-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

EUVD-2008-6971

Malware in sbrugna...

EUVD-2014-5983

Malware in sbrugna...

EUVD-2025-25618

Malicious code in bioql PyPI...

EUVD-2024-52592

Malicious code in bioql PyPI...

CVE-2025-10848

A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /checkstudent.php. Such manipulation of the argument studentid leads to sql injection. The attack may be performed from remote. The exploit is publicly...

CVE-2025-6183

The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious JSON message...

PT-2025-32369 · Eg4 · Eg4

Name of the Vulnerable Software and Affected Versions: EG4 affected versions not specified Description: The affected product allows firmware updates to be downloaded from EG4’s website, transferred via USB dongles, or installed through EG4’s Monitoring Center remote, cloud-connected interface or...

CVE-2020-5608

CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered...

CVE-2012-0954

APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install altered packages via a man-in-the-middle MITM attack. NOTE: this vulnerability exists...

Oracle Linux 9 : php (ELSA-2025-7315)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7315 advisory. - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF...

FreeBSD : MongoDB -- Unauthorized access to underlying data (30418b26-107f-11f0-8195-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 30418b26-107f-11f0-8195-b42e991fc52e advisory. [email protected] reports: A user authorized to access a view may be able to alter the intended collation...

Denial of Service (DoS)

Overview hyperlpr3 is a vehicle license plate recognition. Affected versions of this package are vulnerable to Denial of Service DoS through the /api/v1/rec endpoint. An attacker can cause the server to consume excessive resources and become unavailable by appending characters, such as dashes -, ...

Linux kernel post-release reuse vulnerability (CNVD-2025-05314)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a reuse-after-release vulnerability that stems from an unset device release function, which could lead to reuse-after-release. An attacker could...

CVE-2025-22384

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors to purchase discontinued products in specific scenarios where requests are altered before reaching...

PT-2025-4480 · Optimizely · Optimizely Configured Commerce

Name of the Vulnerable Software and Affected Versions: Optimizely Configured Commerce versions prior to 5.2.2408 Description: A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors to purchase discontinued products in specific...

PHP 8.1.x < 8.1.30 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.30, 8.2.x prior to 8.2.24, or 8.3.x prior to 8.3.12. It is, therefore, affected by multiple vulnerabilities: - Parameter injection vulnerability with a bypass of CVE-2024-4577...

PHP 8.3.x < 8.3.12 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.30, 8.2.x prior to 8.2.24, or 8.3.x prior to 8.3.12. It is, therefore, affected by multiple vulnerabilities: - Parameter injection vulnerability with a bypass of CVE-2024-4577...