WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Endless Posts Navigation versions = 2.2.9...

CVE-2026-21696 Endless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version 1.7.0 and prior to version 1.12.0, Wings does not consider SQLite max parameter limit when processing activity log entries allowing for low privileged user to trigger a conditi...

ROS-20260114-7318

A vulnerability in the iomapwritedelallocscan function of the Linux kernel is related to the execution of a loop with an unreachable exit condition as a result of numeric truncation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals

An integer overflow flaw has been discovered in the Apache HTTP server. The integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff timer becoming 0. Attempts to renew the certificate then are repeated...

Linux Distros Unpatched Vulnerability : CVE-2025-68194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: imon: make sendpacket more robust syzbot is reporting that imon has three problems which result in hung tasks due to forever holding device lock 1. First...

MAL-2025-184674 Malicious code in oliobc-uyg-ugiafdabafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880ffd9ca78fda9a82471f9c58486b5e08ea5b6efdb1c6facda0a420249e7e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179890 Malicious code in lookingan-jeje2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8c132cde42647f289c34bcb8fed8cab1f1befce1696dd4e6a80e6c197b3ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-avm-rucasivasv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2dfeae5d9812a272117c1e717225a8620b43f7aa05e94e6cd9e50f1ba4ed07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kaism-liamiaor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeaad80d26784bf8a7076d83fced13ce68e387d7c306469e38d6d233158118a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171754 Malicious code in rahmatmaulana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb15d9f1c3cc7ade20741f2bbc78348c2d1487ce79d4b5d9b223b417941f50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vinliumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69752bec600ca65775a4964bd53f2ae67c1663a9c7a331166d9a6c74bff84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f08187d5f05211fbd96e89472cd1d7289d68d38ccf9092196ab56442898d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95aaac545f5cc8f70f46c1a67f8838a79669234bf14b3a622e072a5c8fc86928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169349 Malicious code in turisna-sfpsa-derueaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c914eb5ee678590551fb91abc6aa59d319b6c7fe9ef208e79dae348dcf83263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-peddat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5383f3e14c5500f9e7b17157de433d6d55ccaf4dcd8759acc627fac12b65691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-natib-yalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f02d83f2292e433fdaf0dc33c4b699f89230bf92a459395ba9865adf453d145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162469 Malicious code in nokire-arjuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede07c2b467c846c871c3228a53957df2f677436a16fcfc1c23abc7551b8735e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-io-quasar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463aa37c4b880fa305a254100385206be26e5f5ddb3ee65314eb015fdfac0cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-bunyan-centaurus-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7041aeb6d4b6daae8b199986a9b05f5f12ff05ec198d264fea5a5274b2a9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-sedna-vulcan-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e49376076f59d319a4d476b48a806f2b480af776828daf05d7824c7c6a124d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...