MAL-2025-155255 Malicious code in flight-danger-fant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61777dc5f83532b414c9c1698d29178a943835a86a40682a9e1aabf5d08c25b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-dangers-fanthomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abed8d972d7a71224ad802584803cfc8d444497737560591dff81bd560e18e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-dangers-fantma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47abea5b6b38e387b530cb2d65506963f03d3733a3885245e205bda3fc60669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-dangers-fan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647fa6ae11fcc38d53c1215aedaa326dce68c6d819bd4dd94f255089983358f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-danger-fanthom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be882fd01b919c51643da2203626f71a1103653d37a1f471a4ac8f29a91ccb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155251 Malicious code in flight-dang-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cce7d13cbf4cbbd05a5d6e35ef6b6b7b637d5dea25097a17b1ef47fcd74d8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40171

Technical details for CVE-2025-40171 are not provided in the supplied connected documents. Monitor for vendor advisories for affected products, versions, impact, and fixes.

PT-2025-49020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s AF UNIX garbage collection mechanism could incorrectly collect a receive queue of an active socket. This occurs due to a failure to initialize the scc index in the uni...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990227 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't keep queue frozen during system suspend Commit 4ce6e2db00de virtio-blk: Ensure ...

CVE-2025-61956 Missing Authentication for Critical Function in Radiometrics VizAir

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

NASA’s Quiet Supersonic Jet Takes Flight

The X-59 successfully completed its inaugural flight—a step toward developing quieter supersonic jets that could one day fly customers more than twice as fast as commercial airliners...

SPH Engineering UgCS 安全漏洞

SPH Engineering UgCS is a UAV mission planning and flight control software from the Latvian company SPH. A security vulnerability exists in SPH Engineering UgCS version 5.13.0, which originates from a vulnerability that could lead to arbitrary code execution...

CVE-2025-12223

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12222

A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely...

CVE-2025-12223

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12223

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12222

A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely...

CVE-2025-12222

A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely...

CVE-2025-12223 Bdtask Flight Booking Software Package Information package-information unrestricted upload

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...

CVE-2025-12223 Bdtask Flight Booking Software Package Information package-information unrestricted upload

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public...