6532 matches found
CVE-2025-11366: Improper Limitation of a Pathname to a Restricted Directory
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
PT-2025-46664
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central versions prior to 2025.4 are susceptible to an XML External Entities injection that could lead to information disclosure. This issue allows for the potential exposure of sensitive data...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4, which originates from XML external enti...
CVE-2025-11700: Improper Restriction of XML External Entity Reference
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-59491
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
CVE-2025-64280
A SQL Injection vulnerability exists in CentralSquare Community Development version 19.5.7 . The issue is caused by unfiltered input in the permit_no field, which allows an attacker to inject and execute arbitrary SQL commands. This vulnerability could lead to a significant impact on the integrit...
Malicious code in central_xerinae_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77a32b0deeec3e2564b663ddef4bfdeb37ce2acc4a92f86cf146afa2b3a0704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100783
Malicious code in centrallandfowlz3n npm...
EUVD-2025-100779
Malicious code in centralxerinaez3n npm...
Malicious code in central_snail_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6aef9248506ba915b7e6c5ff4fb1543bb8b00fb03c3fe653c45f56c8f0f4a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in central_aardvark_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6a5a3411d041c291be86d2848e037c992235ada8c97dbb289a98661fce55a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in central_whippet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97cdf92bff70cdddd6db2ba0fc14f304dd2935cc2afbac0704390253479d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92885
Malicious code in centralaardvarkz3n npm...
EUVD-2025-92884
Malicious code in centralbarnaclez3n npm...
EUVD-2025-92883
Malicious code in centralcephalopodz3n npm...
MAL-2025-113002 Malicious code in central_whippet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97cdf92bff70cdddd6db2ba0fc14f304dd2935cc2afbac0704390253479d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in central_mammal-toolteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfad6716f71da4a8a30461285e8671ce14745b752b329700a96fb276efe444c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77367
Malicious code in centralmammal-toolteadev npm...