MAL-2025-186895 Malicious code in execute-char-char-stub-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe5d9354bb43f2724bc7efeec94e26f50bce0f7ac425402af053df136cd5c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178372

Malicious code in interface-stack-mock-execute-log npm...

EUVD-2025-178936

Malicious code in fast-stack-tau-execute-hash npm...

EUVD-2025-178987

Malicious code in execute-char-char-stub-serialize npm...

EUVD-2025-179761

Malicious code in char-cat-execute-eta-authenticate npm...

EUVD-2025-175863

Malicious code in try-signal-lambda-execute-kernel npm...

EUVD-2025-175818

Malicious code in unix-execute-file-route-reject npm...

MAL-2025-190242 Malicious code in water-execute-rain-root-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de575c2b404267b02a2a3ca2c624486aef9c70fac497b83043375c8c4080eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175815

Malicious code in unix-zeta-star-execute-uglify npm...

EUVD-2025-176426

Malicious code in serialize-bash-authenticate-execute-cloud npm...

CVE-2025-9223

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature...

CVE-2025-42894

Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrite, and delete arbitrary files on the host system. Successful exploitation could enable the attacker to execute arbitrary operating system...

Security Updates for Microsoft Office Products (November 2025) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the november-11-2025 advisory. - Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. CVE-2025-60724 ...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code in the victim's context and gain access to sensitive data. Successful exploitation requires the malicious party to tric...

EUVD-2025-93429

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2025-93432

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2025-93434

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2025-84349

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature...

Redis: Redis: Authenticated users can execute LUA scripts as a different user

A code injection vulnerability in Redis Lua scripting where an authenticated user can craft a Lua script to manipulate objects and potentially execute code in another user’s context...

CVE-2025-9223 Command Injection

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature...