MAL-2025-134449 Malicious code in isolated_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1164fd97ffca01c0ad315eed47fcd56cbb7ae79337a30fdea4b958f27e90a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89682 Malicious code in putri-kupang55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881a509638e009409da7ac1300631b76499b8c0304bf0976d5338f56f4520a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2020-6148

Malware in sbrugna...

EUVD-2019-2657

Malware in sbrugna...

EUVD-2022-34390

Malicious code in bioql PyPI...

EUVD-2022-26396

Malicious code in bioql PyPI...

EUVD-2024-25349

Malicious code in bioql PyPI...

EUVD-2025-27053

Malicious code in bioql PyPI...

Windows Kernel Information Disclosure

The vulnerability of Microsoft Windows operating systems relates to the removal or modification of critical security code. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2025-48809

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally...

Windows Kernel Information Disclosure Vulnerability

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2022-50132

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: change place of 'privep' assignment in cdns3gadgetepdequeue, cdns3gadgetepenable If 'ep' is NULL, result of eptocdns3epep is invalid pointer and its dereference with privep-cdns3dev may cause panic. Found by Linux...

CVE-2025-40667

CVE-2025-40667 describes a missing authorization vulnerability in TCMAN’s GIM v11. An authenticated attacker can access functions not exposed via the UI by modifying the HTTP response status from ‘302 Found’ to ‘200 OK’ and tampering with hidden fields hdnReadOnly and hdnUserLogin. The CVE docume...

CVE-2025-40667 Missing authorization vulnerability in TCMAN GIM v11

Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionality of the application even when they are not available through the user interface. To exploit the vulnerability the attacker must modify the HTTP code of the response from ‘302...

CVE-2019-17561

The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability...

CVE-2024-58100

CVE-2024-58100 concerns the Linux kernel BPF verifier: the changes_pkt_data property for global functions/extension programs may cause the verifier to invalidate packet pointers incorrectly when replacing a global sub-program. The referenced commits add a changes_pkt_data flag to bpf_prog_aux, se...

Controller Code Modification Detected (Low)

The system detected a change in the controller code that was made via the network. An attacker may use code changes to disrupt normal operations, to cause production losses, or to create a security threat. This plugin only works with Tenable.ot. Please visit...

Controller Code Modification Detected (Medium)

The system detected a change in the controller code that was made via the network. An attacker may use code changes to disrupt normal operations, to cause production losses, or to create a security threat. This plugin only works with Tenable.ot. Please visit...

Controller Code Modification Detected (Critical)

The system detected a change in the controller code that was made via the network. An attacker may use code changes to disrupt normal operations, to cause production losses, or to create a security threat. This plugin only works with Tenable.ot. Please visit...

CVE-2025-37798

In the Linux kernel, the following vulnerability has been resolved: codel: remove sch-q.qlen check before qdisctreereducebacklog After making all -qlennotify callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fqcodeldequeue and codelqdiscdequeue...