994 matches found
MAL-2025-51182 Malicious code in candra-getuk21-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7bf0820bf15bf10cafbe308361047a14368cd58d8a1de1b4b117d133e135d4 The package candra-getuk21-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
Malicious code in bayu-ketan54-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca196dd9c9b98550a4e15df7bb888381d557224792c95cb3ddf8ec7b587be514 The package bayu-ketan54-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
Malicious code in ade-kripik77-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545809d21f21c0c605c19ca0a7be421f462cbfea7c28767a536f0db7c7e77297 The package ade-kripik77-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
Malicious code in wati-kripik80-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910358a7149e051b85f1027e3d048a1fcff42ad951756d53ef9f7d85b20bac10 The package wati-kripik80-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...
MAL-2025-52376 Malicious code in tania-kentang57-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee2ed24be5b9932a0e0ff604c228dcac46b12f6ee0588d8e586a3f4bdcce91f The package tania-kentang57-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Siemens SIMATIC Devices Use After Free (CVE-2024-36899)
In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify The use-after-free issue occurs as follows: when the GPIO chip device file is being closed by invoking gpiochrdevrelease, watchedlines is freed by bitmapfree, but the...
CVE-2025-61796
Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...
CVE-2025-49552
Adobe Connect is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability in versions 12.9 and earlier. The issue is caused by improper handling/validation of user input, enabling a high-privileged attacker to execute scripts in a victim’s browser and potentially hijack a session. Exploit...
CVE-2025-54266 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...
PT-2025-42203
Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description A DOM-based Cross-Site Scripting XSS issue exists in Adobe Connect. A high-privileged attacker could exploit this to execute malicious scripts in a victim’s browser. Exploitation requires a...
EUVD-2012-0015
Malware in sbrugna...
EUVD-2023-59951
Malicious code in bioql PyPI...
EUVD-2022-55129
Malicious code in bioql PyPI...
EUVD-2025-24448
Malicious code in bioql PyPI...
EUVD-2025-26800
Malicious code in bioql PyPI...
EUVD-2025-26801
Malicious code in bioql PyPI...
EUVD-2025-30192
Malicious code in bioql PyPI...
SUSE CVE-2023-53166
In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix externalpowerchanged race bq25890chargerexternalpowerchanged dereferences bq-charger, which gets sets in bq25890powersupplyinit like this: bq-charger = devmpowersupplyregisterbq-dev, &bq-desc, &psycfg;...
CVE-2025-30519 Dover Fueling Solutions ProGauge MagLink LX4 Devices Use of Weak Credentials
Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means. An attacker with network access to the device can gain administrative access to the system...
SUSE CVE-2023-53310
In the Linux kernel, the following vulnerability has been resolved: power: supply: axp288fuelgauge: Fix externalpowerchanged race fuelgaugeexternalpowerchanged dereferences info-bat, which gets sets in axp288fuelgaugeprobe like this: info-bat = devmpowersupplyregisterdev, &fuelgaugedesc, &psycfg;...