13072 matches found
CVE-2025-63371
Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...
CVE-2025-54770
creationtimestamp| type| source ---|---|--- 2025-11-18 17:41:26+00:00| seen| https://seclists.org/oss-sec/2025/q4/194 2025-11-18 21:36:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wp3nxw772n 2026-03-19 00:00:00+00:00| seen|...
Mattermost fails to properly restrict access to archived channel search API
Mattermost versions 11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the /api/v4/teams/teamid/channels/searcharchived endpoint...
Mattermost security vulnerabilities
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in versions prior to Mattermost 11 that stems from a failure to properly restrict access to the archive channel search API, which could lead to the discovery of archived...
CVE-2025-12844
CVE-2025-12844 affects the WordPress plugin AI Engine (versions up to and including 3.1.8). It describes a PHP Object Injection via PHAR Deserialization in rest_simpleTranscribeAudio and rest_simpleVisionQuery. Impact is limited unless a PHP Object Injection (POP) chain exists in another plugin/t...
Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2022-48303)
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...
vim: Vim path traversial
A path traversal flaw was found in Vim. Successful exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive...
Malicious code in clark-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea19685a16fcc4a79d2d300a82c9eace9e35fb566f306b7156a0a0324a93c010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cook-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9e043e52b26b867d5889f880ec1d2499428c4a63724798054c38f6963c1bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in darrin-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc7637187393445a0cb8e62d9563a1333e7c216c3b5a92c3b8453599cb8b7c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dorsey-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in francesca-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42911edb69c06a96b86be1308a7eb5e37ace0a3551f11f0d1d266c8c2142d006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gerald-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a01a941a2efe401c486c02910c49c474f7d070e2c0e4f2c65348bb33c73569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jacobs-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151d04676eab1c6c6825e9bc27f4ee69ac87e5bcb92fcac0ef0f83bdeac23813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in leonard-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a47cf3cfb8296867e4c8654c28fe9e57c0aac86074d3b40e4c02fe2635481b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mosley-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7e6b36eb72b7783aa73fa69f6d239c8f03f65ceeef88ab846c0a0fbaf96ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in patterson-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0c2f5180934788901433a2e1756f96f664364cff73b7cbb41f0b2be399f852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pete-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6ce2d08d1ea692303e0a036355b4e58514e011c56c24183f74a27a0076b36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in stanton-tea-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8e24d5177c9b6686abab5197356c6c1a4a5c3ef624b5307482e99d922a97a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
