Malicious code in arif-pisang2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9afa95e3350b322e457915a993f71c110a541694549a7bf68b97391f96eaa6 The package arif-pisang2-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-51091 Malicious code in bella-telur94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ea24888c9044c8153bf092ae6e08037894539b3ee0363363f3376b0499b941 The package bella-telur94-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-52721 Malicious code in wibowo-keripik73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e371d15c3a402096514abe38685fb5fd48a2d137722fa57fac437a1032674eb4 The package wibowo-keripik73-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51163 Malicious code in budi-takokak34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91943a4afc74a7ceeb900fca1a0a1783ceeff510053dbbcf86d8027aacb66bfe The package budi-takokak34-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-50361 Malicious code in fadhil-botok15-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89850257c6586b97c58ce212f4d8d654744968e5b8475e20c4514cbf8ada8c2a The package fadhil-botok15-devapp was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50283 Malicious code in eka-mieaceh53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7ccb6aee5041a3c6614f1a3178de5d4f43f156ff8c3cd1ae128353b07492fc The package eka-mieaceh53-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51967 Malicious code in gilang-mangut17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca6210b580c09f8d28a0b3490e8fa1331d6c1574a6e26ebc251ade7e386aa3 The package gilang-mangut17-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51425 Malicious code in citra-martabak8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b382d7f55cdfd68f07a6ee9c673d7a16ca7c53ab33223a3481e34a398563a24 The package citra-martabak8-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50416 Malicious code in fauzi-ketoprak91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ead70955ba0fef773b1a58c6e457407db0e1641c6a7ca90c3ab0e84c1ef4bb6 The package fauzi-ketoprak91-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-49961 Malicious code in budi-rawon46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458344617da456846d0d4ec726ef92401b0e6724dec419f4b580be9e30711c90 The package budi-rawon46-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Jumo variTRON300 安全特征问题漏洞

Jumo variTRON300 is an automation system from China-based Jumo Automation Jumo. The Jumo variTRON300 suffers from a security signature issue vulnerability that stems from a flaw in the password generation algorithm, which could allow an unauthenticated, local attacker to obtain the password via...

PT-2025-45604

Name of the Vulnerable Software and Affected Versions Jumo variTRON300 affected versions not specified Description A flaw exists in the password generation algorithm when accessing the debug interface. An unauthenticated local attacker who knows the password generation timeframe may be able to...

JPRO: Automated Multimodal Jailbreaking Via Multi-Agent Collaboration Framework

The widespread application of large VLMs makes ensuring their secure deployment critical. While recent studies have demonstrated jailbreak attacks on VLMs, existing approaches are limited: they require either white-box access, restricting practicality, or rely on manually crafted patterns, leadin...

CVE-2025-48065: Improper Neutralization of Input During Web Page Generation

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a field with an error contains malicious content. Versions 2.7.13 and 3.2.2 protect rendered HTML content...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not ensuring that setent is always present, which could lead to problems with cryptographic random number...

Exploit for CVE-2025-12907

Chrome DevTools RCE Exploit CVE-2025-12907 Overview This...

CVE-2025-64491: Improper Neutralization of Input During Web Page Generation

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.7 and below allow unauthenticated reflected Cross-Site Scripting XSS. Successful exploitation could lead to full account takeover, for example by altering the login form to send...

RAG-Targeted Adversarial Attack on LLM-Based Threat Detection and Mitigation Framework

The rapid expansion of the Internet of Things IoT is reshaping communication and operational practices across industries, but it also broadens the attack surface and increases susceptibility to security breaches. Artificial Intelligence has become a valuable solution in securing IoT networks, wit...

CVE-2025-12488

oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...

CVE-2025-58964

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through 1.6.4...