5447 matches found
CVE-2025-63291
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller. The Alteryx server did not check whether the authenticated user had permission to access the specified MongoDB object ID. By specifying...
PATCHEVAL: A New Benchmark for Evaluating LLMs on Patching Real-World Vulnerabilities
Software vulnerabilities are increasing at an alarming rate. However, manual patching is both time-consuming and resource-intensive, while existing automated vulnerability repair AVR techniques remain limited in effectiveness. Recent advances in large language models LLMs have opened a new paradi...
CVE-2025-63291
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller. The Alteryx server did not check whether the authenticated user had permission to access the specified MongoDB object ID. By specifying...
CVE-2025-40118
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 "scsi: pm80xx: Set phyattached to zero when device is gone" UBSAN reports: UBSAN: array-index-out-of-bounds in drivers/scsi/pm8001/pm8001sas.c:786:...
EUVD-2025-158263
The Comment Edit Core – Simple Comment Editing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.0 via the 'ajaxgetcomment' function. This makes it possible for unauthenticated attackers to extract sensitive data including user IDs, IP...
EUVD-2025-137525
Malicious code in polymer-ids-doreagaf npm...
EUVD-2025-137527
Malicious code in polymer-ids-doragaf npm...
Malicious code in polymer-ids-raf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecc24344f80327cd8a99203e40ddbbcbabd9cb3942acd33e56542fb9ddbd3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137515
Malicious code in polymer-ids-raf npm...
EUVD-2025-137531
Malicious code in polymer-ids-doraeagaf npm...
EUVD-2025-137513
Malicious code in polymer-ids-rgaf npm...
Malicious code in polymer-ids-dorgaf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c3e96b0ef011c8b79011dcd591fd78a55c8397a52fcc2ac89b1076bd5c1a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-178062 Malicious code in polymer-ids-doraemagaf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90770538b2bb53f16e1351781c02615f5362528313f9c86e2ceb03d80c210ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-ids-doreagaf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3897fee034dbf03e564dec87e8315ecd1e3f47b08e9413ff098cd297a7b837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137521
Malicious code in polymer-ids-drgaf npm...
MAL-2025-178065 Malicious code in polymer-ids-dorgaf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c3e96b0ef011c8b79011dcd591fd78a55c8397a52fcc2ac89b1076bd5c1a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-ids-rgaf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da834e3b90985bb2f5625317a8b3ffc73eb030d0db219252be3913f35fa4beba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137519
Malicious code in polymer-ids-raaf npm...