Malicious code in magnetic_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2f22e8e6b7f218f3ca0a32e5f7bfabc9c92df486ff2723d7384b1ceb901fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-5454

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...

CVE-2025-6779

CVE-2025-6779 affects Axis devices running Axis OS where an ACAP configuration file has improper permissions. The underlying issue could permit command injection and privilege escalation, but exploitation is contingent on the device being configured to allow unsigned ACAP applications and an atta...

CVE-2025-6298

ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim ...

CVE-2025-5718

The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP...

EUVD-2025-72450

Malicious code in gatau-app npm...

EUVD-2025-71919

Malicious code in stylo-app npm...

MAL-2025-98371 Malicious code in stylo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f864bb450aa8afd6f3ca8ab8df433e9868bf257f105240e40aef9008231961a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97840 Malicious code in gatau-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6f40b9421e4fb02e10a5640e5bdeb296f270d0971a7a63ca08113a4dc14886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98328 Malicious code in sadboy-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d58c3b6b5017e7d60642f46540fd2ca728018a071e80a4c5851e8b3cbcdd3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71962

Malicious code in sadboy-app npm...

EUVD-2025-72304

Malicious code in joktooll-app npm...

Malicious code in joktooll-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d36f383fe9060d9eac46ea81cddb465b74c368c797b27cc82fb343d38d34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72279

Malicious code in kosan-app npm...

CVE-2025-42887

creationtimestamp| type| source ---|---|--- 2025-11-11 02:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5d2ic7e2s2w 2025-11-11 03:02:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5d5k2bztr2l 2025-11-11 08:41:07+00:00| seen|...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that originates from a malicious ACAP application that can obtain administrator-level service account credentials used by a legitimate ACAP application, potentially resulting in elevated privileges f...

Intel ACAT 安全漏洞

Intel ACAT is an open source platform from Intel Corporation USA. A security vulnerability exists in Intel ACAT versions prior to 3.13, which stems from a competitive condition in the Ring 3 user application that could lead to a denial-of-service attack...

Advantech WebAccess/VPN Command Injection Vulnerability

Advantech WebAccess/VPN is a virtual private network feature integrated in Advantech WebAccess/SCADA software, designed to provide a secure and reliable network connectivity solution for industrial automation and remote monitoring systems. Advantech WebAccess/VPN suffers from a command injection...

PT-2025-46307

Name of the Vulnerable Software and Affected Versions Axis Communications ACAP applications affected versions not specified Description ACAP applications may be able to gain elevated privileges due to improper input validation, which could lead to privilege escalation. This is only possible if th...

EUVD-2025-50796

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...