1326 matches found
EUVD-2025-179371
Malicious code in decrypt-xml-compress-moon-file npm...
Malicious code in minify-report-compress-compress-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99dbbec0f45be78a69c0e58da0c15b858336cd03082f3e4bae5bd685bf93c25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177764
Malicious code in monitor-data-uglify-compress-book npm...
MAL-2025-186511 Malicious code in decrypt-xml-compress-moon-file (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd29dfb05cee6c5ddaf5d6fc7511c903cc2572f128025c139bb45606c8a4d1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179618
Malicious code in compress-water-cluster-slow-cat npm...
MAL-2025-189367 Malicious code in scale-compress-minify-wind-interface (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cf00479e7cd2290e4a0ccc2c84047c9a059d424a668bd7c886f48e901c9c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988960)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988960 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of null pointer There is one call trace that...
CVE-2025-41073 Path Traversal in Gandia Integra Total by TESI
Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories e.g., ......, by exploiting the “direstudio” parameter in...
PT-2025-43440
Name of the Vulnerable Software and Affected Versions TESI Gandia Integra Total version 4.4.2236.1 Description An authenticated attacker can download a ZIP file containing files from the server, including those in parent directories. This is possible by exploiting the direstudio parameter in the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987635)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987635 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of null pointer There is one call trace that...
Malicious Package
Overview mega-compress is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Apache Commons Compress
Summary Vulnerabilities have been identified in Apache Commons Compress, which is used in IBM Engineering Lifecycle Management - Jazz Foundation. Vulnerability Details CVEID:CVE-2024-25710 DESCRIPTION: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Commons...
EUVD-2021-1684
Malware in sbrugna...
EUVD-2021-1620
Malware in sbrugna...
EUVD-2019-0384
Malware in sbrugna...
EUVD-2021-1939
Malware in sbrugna...
EUVD-2021-1798
Malware in sbrugna...
EUVD-2018-0618
Malware in sbrugna...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-417711)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-417711 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover reserve,releasecompressblocks w/ cprwsem lock It needs to cover...