182 matches found
CVE-2025-54158
Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors...
CVE-2025-54158
CVE-2025-54158 affects Synology BeeDrive for desktop prior to 1.4.2-13960. The issue is a missing authentication check in a critical function, enabling local users to potentially execute arbitrary code via unspecified vectors. Multiple connected sources (Red Hat, NVD, CVE lists, and vendor adviso...
(Pwn2Own) Synology BeeStation Plus auth_info Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Synology BeeStation Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the authinfo parameter. The issue results from the lack of prope...
EUVD-2025-117256
Malicious code in loose-tan-bee npm...
EUVD-2025-99312
Malicious code in zoophagousbeez3n npm...
EUVD-2025-102071
Malicious code in stickybeez3n npm...
MAL-2025-128638 Malicious code in melted_bee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89081e89f9ece26bd8fc58efbfb407d77b3412d8839b7092e90490dcf1171e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102399
Malicious code in rulingbeez3n npm...
MAL-2025-130871 Malicious code in unsightly_bee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee02dc972738c0bbfa976463455296cf63ecc477f4bc0ce65b7c82774ab3b473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sticky_bee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74820ec20e11854d41976fda98d2cd8125b2eb69dabedb134f7e1749eda1d23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in unsightly_bee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee02dc972738c0bbfa976463455296cf63ecc477f4bc0ce65b7c82774ab3b473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-113649 Malicious code in envious_bee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d1b7a4bbd370e4fae1b94a1fad86434e5bb2b5473e6abbe555bc30aa499bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74457
Malicious code in minimumbeesapphire-6 npm...
MAL-2025-102096 Malicious code in energetic_bee-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a03c6da0b5d27fa8aa3432a13cff66d4925dae0aef4eae5d7eb3adf0839d277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76974
Malicious code in energeticbee-appteadev npm...
EUVD-2025-77235
Malicious code in controversialbee-silentdev npm...
EUVD-2025-76152
Malicious code in obnoxiousbee-toolteadev npm...
EUVD-2025-77867
Malicious code in yeastybeez3n npm...
MAL-2025-108706 Malicious code in single_bee_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9751d5fbfc10787a292285429f2b345cca0593595f62d38080ef695439335c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...