17513 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-59088
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via DNS discovery. An attacker can access internal network resources and exfiltrate data by sending crafted requests for realms that trigger DNS queries to attacker-controlled zones. Workaround This...
EUVD-2025-104477
Malicious code in internaldolphinz3n npm...
MAL-2025-120827 Malicious code in internal_jackal_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16715b54bcec3264d67a17724533b10e244e3ffb2d66fd64559a2ea44a0ff01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in internal_jackal_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16715b54bcec3264d67a17724533b10e244e3ffb2d66fd64559a2ea44a0ff01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-104476
Malicious code in internaljackalz3n npm...
CVE-2025-24862
Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...
CVE-2025-24862
Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...
AWS VDP: AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific Endpoints
A vulnerability was discovered in the AWS Auto Scaling service, where 6 API endpoints incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail logs. This allowed the adversary to perform API calls using these endpoints and evade the logging of their IP address a...
EUVD-2025-91051
Malicious code in internalbassz3n npm...
MAL-2025-114833 Malicious code in internal_bass_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a22ef1824bf645e1bbccf5f5c752cc8dd8e13deef6e39b1ad1ea3065a9e39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2017-18926
Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research...
CVE-2017-20210 Photo Station
Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research...
EUVD-2025-76524
Malicious code in internalpanda-apptea npm...
Malicious code in internal_beetle-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76525
Malicious code in internalbeetle-strongdev npm...
Malicious code in internal_panda-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eee9415d26ec8d690acba76a5cefa005ecd5030cf7083053b1a3261edff1f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-104350 Malicious code in internal_beetle-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...