CVE-2025-59118 Apache OFBiz: Critical Remote Command Execution via Unrestricted File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users are recommended to upgrade to version 24.09.03, which fixes the issue...

EUVD-2025-116464

Malicious code in async-vega-jupiter-mensa npm...

MAL-2025-136829 Malicious code in sari-getuk38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c9742373cbfbce33c25aac7ab216a2e98f07cf1a3f04e41f753256634fcdcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100142

Malicious code in dangerousbeetlez3n npm...

EUVD-2025-100140

Malicious code in dangerouszebraz3n npm...

EUVD-2025-105956

Malicious code in dangerousarmadilloz3n npm...

EUVD-2025-93512

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

EUVD-2025-92623

Malicious code in dangerouschimpanzeez3n npm...

MAL-2025-113285 Malicious code in determined_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52e7201f065eaaa9d1d65bc69e9ee0a0abb44414ed6de797d85b480d33e6a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77163

Malicious code in dangerousmackerel-appteadev npm...

EUVD-2025-76386

Malicious code in lonelykangaroo-notthedevs npm...

MAL-2025-101311 Malicious code in delicious_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c844b7bb9a7b8543413bd39ad20aab37c40893ffb079b4efc22c9bb1151d6198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79473

Malicious code in dangerousanglerfishz3n npm...

MAL-2025-103227 Malicious code in gita-ronde2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d6d417b9cc83dc522d6bb8b6f0b0c3e337ccc3bed0716709a456a5f0c6e946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rangi1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc184d99dccf9456628c3149578a644833aa0d422acbedfee25b6bdc833b6676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109684 Malicious code in tiara-ruwet22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83b2e3d827f0e520ae33feaa99037aeb3b8905f21afb628667dc245b3597720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...