3759 matches found
CVE-2025-63680
Nero BackItUp in the Nero Productline (versions 2019 through 2025) is vulnerable to a path parsing and UI rendering flaw (CWE-22 ). The vulnerability occurs because the software improperly renders file names and interacts with the Windows ShellExecuteW function. An attacker can create a folder wi...
About the security content of Compressor 4.11.1
About the security content of Compressor 4.11.1 This document describes the security content of Compressor 4.11.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...
Siemens SIMATIC S7-1500 Missing Encryption of Sensitive Data (CVE-2022-27779)
libcurl wrongly allows cookies to be set for Top Level Domains TLDs if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's cookie engine can bebuilt with or without Public Suffix Listawareness. If PSL support not provided, a more rudimentary check...
Siemens SIMATIC S7-1500 Cleartext Transmission of Sensitive Information (CVE-2022-30115)
Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or th...
Malicious code in itale-adci-ggpanekyu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b0bb3e75b240082accea45fa79ee046de1da323c0c72726f296b8646669449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-181679 Malicious code in astam-ift-dinuhkouhgoa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ca128cefe38eae4ab6a7a1562fd686c134a74a8ee4871aa42e28b1b1401993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lookingan-jaja2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb295f4a4e38c104c9222d7e764afa2575653fe50046528b891dddbf78c9dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-180054 Malicious code in teate-thy-py-dulna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7776cb937480514dc004cc5ded1a11f860da618eba61b6a83451262aa83e1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuilva-avmim-rucoposivsv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee08c7ff64dea964c75f3c2307b89f5652ec6682ff18c97ad4d341414c831212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-177098 Malicious code in nuyar-adudar-badya (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c9245ee249f2c882e929118252ab415f43d94793d5cc0fbf0153bf159776e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-177232 Malicious code in poglymer-ogaih-ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfd8a669a7c3b11f9b8627f77655b671af843b680dcd7984cdd34a43e22318a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-175202 Malicious code in kapvino-socovni-fafgsffsgfi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f0db04b06c7fd4afb67b4c627806a7293bc62c457442601bbebffc4b5e4b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in erftads-eredd-trufd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693b1433880712b3f4871fc98240590fe418288703e30316ffb3ef56e68a650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kapvino-soni-favavraia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61ad79fbc01e8c3f050333f4c498becf893502ce8bb75eeb6f7de8d9511192c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aimanadeem (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b9079f0921cf3811bb0227615a47b61c23aa96922e6ed19893ef806eb77433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in poli-akilu-lunakinam (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d27952917ded0d996e1230534c07cda9b8bf04cde3dcd5fb30e169adb13ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-159440 Malicious code in manadsi-sfda-marafid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3d2099ba9544735e696e4664689fd3ef71df60d2aea651510f84edd9359dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-150784 Malicious code in @miptaa02/kasdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed9899eee5a01aadf08fbc7751720b06848233758b2bffcbf4db5bf74788092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spectron-webdriver-telesto-aether-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92288b49e8c91825ef9377e7d4104a9ade87af1b1c307a256eff1113212ccfdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
