EUVD-2025-53983

Malicious code in hidden-purple-booby npm...

Malicious code in hidden-purple-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e5c20585cfa09363ba509137da16ed7ac133a76508c90d9e0ff055c093d52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50805

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

CVE-2025-33150

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

CVE-2025-33150

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

CVE-2025-33150 IBM Cognos Analytics Certified Containers information disclosure

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

CVE-2025-33150

CVE-2025-33150 affects IBM Cognos Analytics Certified Containers 12.1.0. The issue is information disclosure due to hidden pages that could reveal package parameter information. Public sources confirm the affected product/version and provide a remediation path: upgrade to 12.1.1. No exploit detai...

CVE-2025-33150 IBM Cognos Analytics Certified Containers information disclosure

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages...

Malicious code in hidden_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2b3007847f39d7d6971dd53a111d49b19f0df74ac5432243e5141fdc5f2b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

LANDFALL Spyware Targeted Samsung Galaxy Phones via Malicious Images

Unit 42 discovered LANDFALL, commercial-grade Android spyware, which used a hidden image vulnerability CVE-2025-21042 to remotely spy on Samsung Galaxy users via WhatsApp. Update your phone now...

GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

Cybersecurity researchers have disclosed a new set of three extensions associated with the GlassWorm campaign, indicating continued attempts on part of threat actors to target the Visual Studio Code VS Code ecosystem. The extensions in question, which are still available for download, are listed...

IBM Cognos Analytics Certified Containers 安全漏洞

IBM Cognos Analytics Certified Containers is a suite of business intelligence software from International Business Machines IBM. A security vulnerability exists in IBM Cognos Analytics Certified Containers version 12.1.0 that stems from the presence of a hidden page that could lead to the...

PT-2025-46187

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Certified Containers version 12.1.0 Description IBM Cognos Analytics Certified Containers version 12.1.0 may reveal package parameter information because of hidden pages. Recommendations At the moment, there is no...

CYPRESS: Transferring Secrets in the Shadow of Visible Packets

Network steganography and covert communication channels have been studied extensively in the past. However, prior works offer minimal practical use for their proposed techniques and are limited to specific use cases and network protocols. In this paper, we show that covert channels in networking...

EUVD-2024-55065

A flaw was found in the 3scale developer portal. This issue can allow account creation or updates passed through hidden or read-only fields, the contents of which may be altered. This flaw allows an attacker to access or modify restricted information...

CVE-2024-12125

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information...

CVE-2024-12125 3scale-porta: readonly fields not validated server-side

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information...

CVE-2024-12125

The CVE-2024-12125 affects the 3scale Developer Portal. The flaw allows account creation or updates where fields configured as read-only or hidden can be modified, exposing restricted information. Root cause: server-side validation does not enforce read-only/hidden constraints on account operatio...

CVE-2024-12125 3scale-porta: readonly fields not validated server-side

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information...

CVE-2024-12125

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information. Mitigation Red Hat has investigated whether a...