CVE-2025-52410

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The myds GET parameter is not adequately sanitized before being used in SQL queries...

CVE-2025-65093 LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query...

CVE-2025-65093 LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query...

EUVD-2025-198051

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query...

How Adversaries Exploit the Blind Spots in Your EASM Strategy

Internet-facing assets like domains, servers, or networked device endpoints are where attackers look first, probing their target’s infrastructure…...

EUVD-2025-117507

Malicious code in blind-purple-python npm...

Malicious code in blind-purple-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5c16558a076087c67c07733dd5d026ae9d399fad0f129b20f1455d41212350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77435

Malicious code in blindsnail-strongdev npm...

EUVD-2025-77437

Malicious code in blindchicken-appteadev npm...

EUVD-2025-77436

Malicious code in blindchimpanzee-smiletea npm...

EUVD-2025-82635

Malicious code in blindelk0xrequest npm...

MAL-2025-100010 Malicious code in blind_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a9ea09fef6ecb5bbfee20c77bb0651f49d97f8b5d39ff584a0fac1d4bd04b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82634

Malicious code in blindplatypus0xrequest npm...

EUVD-2025-82636

Malicious code in blindcockroach0xrequest npm...

MAL-2025-100009 Malicious code in blind_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394a13799393de669977d5f3c698b78aa2535df48572ffcc638178cfcd30f5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71660

Malicious code in blindjunglefowlz3n npm...

EUVD-2025-65157

Malicious code in blindsailfishz3n npm...

Malicious code in blind_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcab644ee6d4efe7faa653c3779f7e8d93ea18fef8ff817963cf7c2aa001192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55657

Malicious code in blind-red-mollusk npm...

MAL-2025-66989 Malicious code in blind-amaranth-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698e76686e61628f27e10e2a84158cdf025190b7bd0fe4fcbdfc37c2cd441dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...