EUVD-2025-137531

Malicious code in polymer-ids-doraeagaf npm...

EUVD-2025-137527

Malicious code in polymer-ids-doragaf npm...

EUVD-2025-137523

Malicious code in polymer-ids-dorgaf npm...

Malicious code in polymer-ids-raf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecc24344f80327cd8a99203e40ddbbcbabd9cb3942acd33e56542fb9ddbd3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137525

Malicious code in polymer-ids-doreagaf npm...

MAL-2025-178070 Malicious code in polymer-ids-rgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da834e3b90985bb2f5625317a8b3ffc73eb030d0db219252be3913f35fa4beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178065 Malicious code in polymer-ids-dorgaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c3e96b0ef011c8b79011dcd591fd78a55c8397a52fcc2ac89b1076bd5c1a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137529

Malicious code in polymer-ids-doraemagaf npm...

MAL-2025-178061 Malicious code in polymer-ids-doraeagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705be2035e20d0ba344828867e5b1e6dbba494b6ec2cf7e3ad542820c52fff86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178062 Malicious code in polymer-ids-doraemagaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90770538b2bb53f16e1351781c02615f5362528313f9c86e2ceb03d80c210ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178063 Malicious code in polymer-ids-doragaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856e8539e3333a44708b8953e24cbc44a95f38ae2cbea869ccbdd6f7ed7c3149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

A flaw was found in shadow-utils. Affected versions of shadow-utils establish a default /etc/subuid behavior, for example, uid 100000 through 165535 for the first user account, that can conflict with the uids of users defined on locally administered networks. This issue potentially leads to accou...

shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

A flaw was found in shadow-utils. Affected versions of shadow-utils establish a default /etc/subuid behavior, for example, uid 100000 through 165535 for the first user account, that can conflict with the uids of users defined on locally administered networks. This issue potentially leads to accou...

Debian dsa-6053 : affs-modules-6.1.0-37-4kc-malta-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6053 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6053-1 [email protected] https://www.debian.org/securit...

RHEL 10 : libsoup3 (RHSA-2025:21032)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21032 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup,...

PT-2025-54909

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251105T184115 2025-11-05T18:41:15Z. jscPED-11136: Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3987 GHSA-fmjh-f678-cv3x GO-2025-3988 GHSA-wpwj-69cm-q9c5 GO-2025-3999 GHSA-3g72-chj4-22...

Fedora: Security Advisory (FEDORA-2025-66fb3fa6b0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-12859 DedeBIZ templets_one_edit.php sql injection

A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templetsoneedit.php. The manipulation of the argument ids leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

CVE-2025-12859: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templetsoneedit.php. The manipulation of the argument ids leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

CVE-2025-52602

CVE-2025-52602 affects HCL BigFix Query WebUI Query, where an HTTP GET endpoint may disclose discoverable data such as group names and active user names/IDs via the /api/v1/query endpoint. This exposure could enable targeted phishing or social engineering. The available connected documents confir...