CVE-2025-60022

Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on and/or tamper with an encrypted communication...

NVIDIA Isaac-GR00T 代码注入漏洞

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. NVIDIA Isaac-GR00T suffers from a code injection vulnerability that stems from a code injection issue in the Python component that could lead to code execution, elevation of privilege, information disclosure, and data tampering...

NVIDIA Isaac-GR00T 代码注入漏洞

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. NVIDIA Isaac-GR00T suffers from a code injection vulnerability that stems from a code injection issue in the Python component that could lead to code execution, elevation of privilege, information disclosure, and data tampering...

PT-2025-47348

Name of the Vulnerable Software and Affected Versions NVIDIA Isaac-GR00T affected versions not specified Description The NVIDIA Isaac-GR00T robotics platform contains a flaw related to improper code generation management. Exploitation of this issue could allow a remote attacker to execute arbitra...

PT-2025-47349

Name of the Vulnerable Software and Affected Versions NVIDIA Isaac-GR00T for all platforms affected versions not specified Description A flaw exists in a Python component of NVIDIA Isaac-GR00T that could allow an attacker to inject code. Exploitation of this issue may result in code execution,...

GO-2025-4099 IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering in github.com/zitadel/zitadel

IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

Intel CIP Code Issue Vulnerability

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP has a code issue vulnerability that stems from an unrestricted upload of dangerous types of files, which can be exploited by attackers to cause data tampering...

MAL-2025-186806 Malicious code in eridanus-darkenergy-blackhole-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5faf542de599bd45bf39586c3db03f9967f089712019cfa42b18511a1522949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-23361

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and da...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

CVE-2025-33186

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

Malicious code in teate-thy-sonic-amahaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43bf4513929e6bdb60d784facda033dac81db453091dd427e7dbbd96993208c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178221 Malicious code in rindaman-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb982df2248236641487c4d5683d6f526c9f3ff7b7a744aeae9afd8c7744cbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-iya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb02998b61acb34ba0a5923b73e12ef50a5465383f5608fd6e3d1fce17e3eb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155445 Malicious code in guras-nutra-nutapas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499f2a4c2dcead80408c2800bedc68b0130fea0fbb998ec1cc84076dd7119b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5661578ce88c5c8e3cef98409537b0728ff170bf05a391fa7848a70c150c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b299eb041792d4565a375a55ff15b53c88021d167db4dc819712a7be809f629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6516c96575879f9ff0dadefa9a335cbce6f555a2a9e58fbecbc9781d94d661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mrra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595fb9d0e41a0071a160d157cdca1a0a065c0e862f977eaa48aec646dc040979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-biunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4569fdc08bd40fe79f89b61e7b22fff126db8646f0fe48dc82da041eadefb2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...