Malicious code in patria-keripik20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22c18d56f356fcc1296a54e5d86d2063ba4c22352806d3fd2ddb4bf286d1702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57674 Malicious code in mulyono-mendoan28-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9df8b86f86c58f6801f255804989ee33b42752dd2903dfa0b8057bb1a6e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gembus87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee92528891a3b129a4dbc6fe2df65e876187c1c3ebf48cb823ad6ba3d171ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57351 Malicious code in lina-gaplek86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0eb6ecd8211ef33691ca1cfbc37c46ce52002d96937479867e629f6c278eec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53855 Malicious code in ogi-kentang64-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ba2d0a3368e302b00ded07efc300648cff2ad6ccc677411fcef03f8bbd0066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-nasi58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aac73f8574a31a62d0911596cf78f211d204a3e353e4ae49ad19a84d75d5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasipecel67-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3206451ee1974bd3a7b1f0cdb66f379ecb0c15f2288126332dcc6075642d625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-dradag55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80781f4c26c2d8006a3e572e0027499141ca2dd8c71968c5810c5f1ce090b89 The package cindy-dradag55-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Cyberattack Detection in Critical Infrastructure and Supply Chains

Cyberattack detection in Critical Infrastructure and Supply Chains has become challenging in Industry 4.0. Intrusion Detection Systems IDS are deployed to counter the cyberattacks. However, an IDS effectively detects attacks based on the known signatures and patterns, Zero-day attacks go...

EUVD-2019-11407

Malware in sbrugna...

CVE-2025-10696

CVE-2025-10696 affects OpenSupports 4.11.0. An endpoint allows editing the list of 'supervised users' for any account without verifying ownership, enabling a Level 1 staff member to modify the supervision relationship of a target user. This can let the target view tickets belonging to the added s...

EUVD-2023-45009

Malicious code in bioql PyPI...

EUVD-2022-52718

Malicious code in bioql PyPI...

CVE-2025-10436

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/supsearchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-59518

In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server...

CVE-2025-58365

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, the blog application in XWiki allowed remote code execution for any user who has edit right on any page. Normally, these are all logged-in users as they can edit their own user...

The vulnerability of the NotificationDisplayerClass class in the XWiki platform, a platform for creating collaborative web applications. The XWiki platform allows attackers to perform XSS attacks.

The vulnerability of the NotificationDisplayerClass class in the XWiki platform, a platform for creating collaborative web applications, is related to the absence of warnings about dangerous actions when loading edited objects. Exploiting this vulnerability could allow attackers to perform XSS...

FragFake: a Dataset for Fine-Grained Detection of Edited Images with Vision Language Models

Fine-grained edited image detection of localized edits in images is crucial for assessing content authenticity, especially given that modern diffusion models and image editing methods can produce highly realistic manipulations. However, this domain faces three challenges: 1 Binary classifiers yie...

thunderbird: Information Disclosure of /tmp directory listing

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edit...

thunderbird: Information Disclosure of /tmp directory listing

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edit...