Malicious code in lucky_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0472ff209c6aeae5c640558f8f49064893b565f600d171230b137149b4ac7309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-serimuka51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f67aeca74728c7aebfac56d2686ae04fb61f56e13dd81e85a0221907229a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gembus87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee92528891a3b129a4dbc6fe2df65e876187c1c3ebf48cb823ad6ba3d171ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 948921b543037cf7e560ac5648f7a21a874d494350c6dd8d810ce697db50e617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53855 Malicious code in ogi-kentang64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ba2d0a3368e302b00ded07efc300648cff2ad6ccc677411fcef03f8bbd0066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-nasi58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aac73f8574a31a62d0911596cf78f211d204a3e353e4ae49ad19a84d75d5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasipecel67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3206451ee1974bd3a7b1f0cdb66f379ecb0c15f2288126332dcc6075642d625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-dradag55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80781f4c26c2d8006a3e572e0027499141ca2dd8c71968c5810c5f1ce090b89 The package cindy-dradag55-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Cyberattack Detection in Critical Infrastructure and Supply Chains

Cyberattack detection in Critical Infrastructure and Supply Chains has become challenging in Industry 4.0. Intrusion Detection Systems IDS are deployed to counter the cyberattacks. However, an IDS effectively detects attacks based on the known signatures and patterns, Zero-day attacks go...

EUVD-2019-11407

Malware in sbrugna...

CVE-2025-10696

CVE-2025-10696 affects OpenSupports 4.11.0. An endpoint allows editing the list of 'supervised users' for any account without verifying ownership, enabling a Level 1 staff member to modify the supervision relationship of a target user. This can let the target view tickets belonging to the added s...

EUVD-2023-45009

Malicious code in bioql PyPI...

EUVD-2022-52718

Malicious code in bioql PyPI...

CVE-2025-10436

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/supsearchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-59518

In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server...

CVE-2025-58365

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, the blog application in XWiki allowed remote code execution for any user who has edit right on any page. Normally, these are all logged-in users as they can edit their own user...

The vulnerability of the NotificationDisplayerClass class in the XWiki platform, a platform for creating collaborative web applications. The XWiki platform allows attackers to perform XSS attacks.

The vulnerability of the NotificationDisplayerClass class in the XWiki platform, a platform for creating collaborative web applications, is related to the absence of warnings about dangerous actions when loading edited objects. Exploiting this vulnerability could allow attackers to perform XSS...

FragFake: a Dataset for Fine-Grained Detection of Edited Images with Vision Language Models

Fine-grained edited image detection of localized edits in images is crucial for assessing content authenticity, especially given that modern diffusion models and image editing methods can produce highly realistic manipulations. However, this domain faces three challenges: 1 Binary classifiers yie...

thunderbird: Information Disclosure of /tmp directory listing

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edit...

thunderbird: Information Disclosure of /tmp directory listing

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edit...