6532 matches found
CVE-2025-11366: Improper Limitation of a Pathname to a Restricted Directory
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4, which originates from XML external enti...
CVE-2025-11700: Improper Restriction of XML External Entity Reference
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-64280
A SQL Injection vulnerability exists in CentralSquare Community Development version 19.5.7 . The issue is caused by unfiltered input in the permit_no field, which allows an attacker to inject and execute arbitrary SQL commands. This vulnerability could lead to a significant impact on the integrit...
CVE-2025-59491
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
PT-2025-46664
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central versions prior to 2025.4 are susceptible to an XML External Entities injection that could lead to information disclosure. This issue allows for the potential exposure of sensitive data...
Malicious code in central_xerinae_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77a32b0deeec3e2564b663ddef4bfdeb37ce2acc4a92f86cf146afa2b3a0704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100783
Malicious code in centrallandfowlz3n npm...
EUVD-2025-100779
Malicious code in centralxerinaez3n npm...
Malicious code in central_snail_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6aef9248506ba915b7e6c5ff4fb1543bb8b00fb03c3fe653c45f56c8f0f4a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in central_aardvark_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6a5a3411d041c291be86d2848e037c992235ada8c97dbb289a98661fce55a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92885
Malicious code in centralaardvarkz3n npm...
EUVD-2025-92884
Malicious code in centralbarnaclez3n npm...
MAL-2025-113002 Malicious code in central_whippet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97cdf92bff70cdddd6db2ba0fc14f304dd2935cc2afbac0704390253479d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92883
Malicious code in centralcephalopodz3n npm...
Malicious code in central_whippet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97cdf92bff70cdddd6db2ba0fc14f304dd2935cc2afbac0704390253479d0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in central_mammal-toolteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfad6716f71da4a8a30461285e8671ce14745b752b329700a96fb276efe444c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77367
Malicious code in centralmammal-toolteadev npm...