11720 matches found
CVE-2025-6945 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments...
CVE-2025-6945 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments...
GitLab 命令注入漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A command injection vulnerability exists in GitLab EE versions 17.8 through...
Malicious code in astam-akif-dalimunak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614bd4bffb2dfee60047ea1585dff6b5d5a06f6ece161973e2c686c0f9d45523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Mindgard Finds Sora 2 Vulnerability Leaking Hidden System Prompt via Audio
AI security firm Mindgard discovered a flaw in OpenAI's Sora 2 model, forcing the video generator to leak…...
MAL-2025-134173 Malicious code in hidden_stingray_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42148c0ee7754793642bce0d0f9047426afbd1bd9ccd1408a23cf30339302a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-98183
Malicious code in hiddenaardwolfz3n npm...
EUVD-2025-98182
Malicious code in hiddenmosquitoz3n npm...
MAL-2025-127219 Malicious code in hidden_aardwolf_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bdd6a1a847768b5744f53433a48acac9d99632be124de8a1d0f91a80a484d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tomi-telur68-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0334db9939680d5b80073f76c398ae3b813cdb5a6b125959bf74cc6f83815828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-33150
IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...
EUVD-2025-91252
Malicious code in hiddenlemmingz3n npm...
MAL-2025-114632 Malicious code in hidden_lemming_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85984fb4b5e32eb6df84a653975c9c4c71cd4b72a3aeaa9ad4e48d0849a9f75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74581
Malicious code in hiddenlimpetindigo-4 npm...
EUVD-2025-74579
Malicious code in hiddenmastodonsalmon-43 npm...
EUVD-2025-74580
Malicious code in hiddenlocustjade-78 npm...
Malicious code in hidden_mastodon_salmon-43 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148dbda5dfbafb290510b2cf7dfbaf42d6cb5b2478404d51b6e77d7d70243bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76668
Malicious code in hiddeneagle-silentdev npm...