16138 matches found
CVE-2025-42887
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...
EUVD-2025-98755
Malicious code in fullponyz3n npm...
EUVD-2025-105154
Malicious code in fullminnowz3n npm...
EUVD-2025-91792
Malicious code in fullbasiliskz3n npm...
EUVD-2025-70330
Malicious code in fulltakinz3n npm...
EUVD-2025-71563
Malicious code in fullanteaterz3n npm...
Malicious code in full_anteater_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a10b13cbafe9b83abb19cc56e20f678e6f8c076774078c5b6259e2eed832d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in full-ivory-moth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a12cf7b17fa8309bd95ca25d0d0bb493716928d0ef978d8e450beb8b7e93484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54201
Malicious code in full-ivory-moth npm...
EUVD-2025-54200
Malicious code in full-jade-junglefowl npm...
Malicious code in full-ivory-egret (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8dc6f6e4686daa2d21f377ef1a92018323685cdee5286ecf2093b76480dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-68449 Malicious code in full-jade-junglefowl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54202
Malicious code in full-ivory-egret npm...
CVE-2025-42892 OS Command Injection vulnerability in SAP Business Connector
Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating...
CVE-2025-42887 Code Injection vulnerability in SAP Solution Manager
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...
CVE-2025-42887 Code Injection vulnerability in SAP Solution Manager
Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...
PT-2025-46228
Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description SAP Solution Manager is susceptible to a code injection issue stemming from inadequate input sanitization. An authenticated attacker can inject malicious code by calling a...
MAL-2025-66542 Malicious code in @walletwave/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786e84734b8e7f4af9096790c95dcb0dae82c3364c93e7a2e662c98f3e21e2c6 The package @walletwave/core was found to contain malicious code. Source: ghsa-malware df7464e8000db02c291bbd2af61bdf264c816df679997bf1cefc42d5d4825c...
CVE-2025-64513 Milvus Proxy has Critical Authentication Bypass Vulnerability
Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the...