EUVD-2025-176373

Malicious code in simulate-refactor-java-route-beta npm...

EUVD-2025-176423

Malicious code in serialize-final-beta-deserialize-await npm...

EUVD-2025-176695

Malicious code in report-epsilon-socket-beta-sudo npm...

EUVD-2025-178379

Malicious code in integer-pipe-beta-orchestrate-simulate npm...

EUVD-2025-178221

Malicious code in kappa-pi-nu-beta-lambda npm...

EUVD-2025-180097

Malicious code in beta-try-omicron-orchestrate-analyze npm...

EUVD-2025-175853

Malicious code in uglify-bash-index-beta-interface npm...

EUVD-2025-179215

Malicious code in earth-visualize-abstract-beta-pipe npm...

EUVD-2025-177271

Malicious code in permission-emulate-cloud-beta-stub npm...

Malicious code in omicron-route-beta-virtualize-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1df4644462be2f6bef9258c6e7098ecbad6972699c1f806efa8e5ab8a3428a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180099

Malicious code in beta-moon-fast-authorize-deploy npm...

EUVD-2025-179509

Malicious code in cron-kappa-bash-serialize-beta npm...

EUVD-2025-180100

Malicious code in beta-key-promise-socket-file npm...

EUVD-2025-178825

Malicious code in function-finally-beta-fast-deploy npm...

MAL-2025-188421 Malicious code in omicron-route-beta-virtualize-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1df4644462be2f6bef9258c6e7098ecbad6972699c1f806efa8e5ab8a3428a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

ZenTao多款产品 安全漏洞

ZenTao Biz and others are a project management software from the Chinese company ZenTao. A security vulnerability exists in several ZenTao products, which stems from insufficient validation of the parameter account in the file /zentao/user-login.html, which could lead to an SQL injection attack...

HP Integrated Lights-Out Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-11983)

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39. This plugin only works with Tenable.ot. Please visit...

CVE-2025-64435

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate virt-launcher pod associated with the VMI. This can...

SuiteCRM 安全漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM versions 7.14.7 and earlier and 8.0.0-beta.1 through 8.9.0, which stems from a user session not being disabled when the account is deactivated, which could result in elevated...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...