EUVD-2025-60994

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI provider.�This could further lead to disclosure or modification of information about the server. There i...

Malicious code in fauzi-mie73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3034cf23f339f34d976064e5daf8a05350b66fe1456a5fa8419f89f41f64c04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sate44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98216a8116e14baa1ad395cf668ced01e518d7863bed003809de9176d3c3f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-rawon72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bd550a90ff7685b8419d25973a30a96db888ffb6390c226ad81ccd03314f13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-martabak62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34d4ed0aef7959c15d53fb039cfaede7cb7710177a3665025f096703436b869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-lontong3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eebd19cd655d272703db8d554f1cac34b65160a3e055c2abc1a3cb081b3582f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-copper-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4331caae1eb3bea0eb7b19d037e2ba2e0218028f98298cad73e5db77e6c941d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-coffee-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae3664e06efedba15e365b53fc802368b75cd727a341aef99f6cea2819bedb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused-amber-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe92f325cb2f8bba585932c37dc597908665232e0bb19aa3a0e58f25bd93b49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66955 Malicious code in bewildered-black-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88694bd596902a819757c99cd9716dc39c7efe1bdb23496e6a76ab1425a23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68986 Malicious code in isolated-bronze-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6235956f79263662ff129bf606e13aa3be29e48587b62990b39121fd5ecceba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-mangut38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96fe5ad1e7fd741699e8a86dc25d4028da1eba3b81d707b7bad9afa9599259c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-sego51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba2e337197c1ad515d762d394ab3b747664b5c33aabec70bf542cb3e78ec41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66436 Malicious code in zain-tahu3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90be907761b961f32e2c680ed27fe926f4ec3c464cd87f0dbdf5393ccb0df05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

WordPress plugin Private Google Calendars has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2025-46376

Name of the Vulnerable Software and Affected Versions NVIDIA AIStore affected versions not specified Description NVIDIA AIStore contains a security flaw in the Authentication AuthN component. A successful exploit of this issue may lead to escalation of privileges, information disclosure, and data...

PT-2025-46325

Name of the Vulnerable Software and Affected Versions The Classified Listing – AI-Powered Classified ads & Business Directory Plugin versions up to and including 5.2.0 Description The Classified Listing – AI-Powered Classified ads & Business Directory Plugin for WordPress is susceptible to...

WordPress Plugin Shelf Planner has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-46225

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal affected versions not specified Description An unauthenticated attacker can inject JNDI environment properties or provide a URL during JNDI lookup operations. This could allow access to an unintended JNDI...

PT-2025-46570

Name of the Vulnerable Software and Affected Versions Booking Calendar | Appointment Booking | Bookit plugin for WordPress versions up to and including 2.5.0 Description The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is susceptible to unauthorized data modification. This...