EUVD-2025-53924

Malicious code in hot-violet-jaguar npm...

EUVD-2025-53925

Malicious code in hot-scarlet-elk npm...

Malicious code in hot-copper-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab7476b47cb801d6bb9ee12dfac0af5727f9ce256bb96e85ccf5d168258463f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68725 Malicious code in hot-violet-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539ea41d7f4c382c0cc0227c4bd1b3d4fac731777e268d5856cedb38fe23a8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53926

Malicious code in hot-copper-skink npm...

EUVD-2025-53927

Malicious code in hot-amber-fowl npm...

Malicious code in hot-violet-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539ea41d7f4c382c0cc0227c4bd1b3d4fac731777e268d5856cedb38fe23a8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot-amber-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7075da0b286d55066fbcdd69b654e9a899c828237de81cfd5523e7cd0c64367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50045

Malicious code in hotbasiliskz3n npm...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990094 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: PCI: pnvphp: Clean up allocated IRQs on unplug When the root of a nested PCIe bridge configuration is unplugged, the pnvphp driver leaks the allocated IRQ resources for the child bridges’ hotplug event notifications, resulting in...

EUVD-2025-37073

Malicious code in epic-webpack-hot-dev-client npm...

MAL-2025-49220 Malicious code in epic-webpack-hot-dev-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad1ea558baf857da2084adf46bf56730bd6d03f39046fff99845429d9e06cd2 The package epic-webpack-hot-dev-client was found to contain malicious code...

Malicious code in epic-webpack-hot-dev-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad1ea558baf857da2084adf46bf56730bd6d03f39046fff99845429d9e06cd2 The package epic-webpack-hot-dev-client was found to contain malicious code...

CVE-2025-12342 Serdar Bayram Ghost Hot Spot Login Auth.php sql injection

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

CVE-2025-12342 Serdar Bayram Ghost Hot Spot Login Auth.php sql injection

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

EUVD-2025-36389

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

CVE-2025-12342

Serdar Bayram Ghost Hot Spot contains a SQL injection flaw in the Login component, originating from an unknown function in /Auth.php. The issue affects versions up to 20251014 (PTSecurity notes later versions as 20251015+). Exploitation can be conducted remotely; multiple sources indicate the exp...

Serdar Bayram Ghost Hot Spot SQL注入漏洞

Serdar Bayram Ghost Hot Spot is a Portal Authentication System software by Serdar Bayram Individual Developer. A SQL injection vulnerability exists in Serdar Bayram Ghost Hot Spot 20251014 and earlier versions, which stems from a SQL injection vulnerability in the component Login in the file...

Siemens SIMATIC Devices Use After Free (CVE-2024-42302)

In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a DPC event occurs concurrently to hot- removal of the same portion of the hierarchy: The dpchandler awaits readiness of the...