661 matches found
CVE-2025-13922
CVE-2025-13922 affects Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI (WordPress plugin). Time-based blind SQL Injection via the existing_terms_orderby parameter in the AI preview AJAX endpoint allows authenticated contributors (with AI metabox permissions) to append SQL queries,...
PT-2025-49327
The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'existing terms orderby' parameter in the AI preview AJAX endpoint in all versions up to, and including, 3.40.1. This is due to insufficient escaping on...
SUSE CVE-2025-13609
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
CVE-2025-13609 Keylime: keylime: registrar allows identity takeover via duplicate uuid registration
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
CVE-2025-13609 Keylime: keylime: registrar allows identity takeover via duplicate uuid registration
A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...
EUVD-2025-197620
Flowise Fails to Invalidate Existing Sessions After Password Changes...
CVE-2025-64749 Directus Vulnerable to Information Leakage in Existing Collections
Directus is a real-time API and App dashboard for managing SQL database content. An observable difference in error messaging was found in the Directus REST API in versions of Directus prior to version 11.13.0. The /items/collection API returns different error messages for two cases: when a user...
EUVD-2025-117399
Malicious code in existing-cyan-bobcat npm...
EUVD-2025-99095
Malicious code in existingtunaz3n npm...
MAL-2025-126311 Malicious code in existing_mastodon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 336380e494dc273a01211368cf28a3c0aeefd201e4b456f55fe4ceba880b8445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
kea: Kea crash upon interaction between specific client options and subnet selection
A vulnerability was found in Kea. When an attacker who is an existing client with an assigned IP sends a crafted unicast packet directly to the server's IP and Kea cannot find any subnets that match that client's credentials, the server crashes causing a Denial of Service via assertion/NULL-path...
EUVD-2025-76920
Malicious code in existingworm-appteadev npm...
MAL-2025-102359 Malicious code in existing_worm-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b163463ea5d436addf9c6ca9eb308e767cf6a7b89f7268496ec3326936c53ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81986
Malicious code in existinggalliform0xrequest npm...
EUVD-2025-70548
Malicious code in existingcamelz3n npm...
MAL-2025-94367 Malicious code in existing_panther_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0877858e364cd1964aa36a7ffb8a8bd4eb899da9cbde9bec9c5b5a37a4cd02d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-64190
Malicious code in existing-green-salamander npm...
MAL-2025-68163 Malicious code in existing-purple-quail (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6b4be112198f0e21333fcb146b8759831724822f1f94ae72d6fc60283c0d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...