6626 matches found
MAL-2025-187520 Malicious code in io-cordelia-meteor-filament (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb443e8b535dc59175b1ef8d7eb72d284f31f0b56ff72943312cddcb025736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187525 Malicious code in io-quark-babel-centaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187345 Malicious code in hermes-jekyll-io-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebbffea7d927de23aca7aba4078e9cd9b853bf3771183fa290a72232a56eb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178356
Malicious code in io-radiant-kinetic-betelgeuse npm...
PT-2025-46922
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1 Description The NIM server service formerly known as NIM master – nimesis – may allow a remote attacker to traverse directories on the system. An attacker could send a specially crafte...
Siemens SIMATIC S7-1500 Use After Free (CVE-2024-53166)
block, bfq: bfqq uaf in bfqlimitdepth Set new allocated bfqq to bic or remove freed bfqq from bic are both protected by bfqd-lock, however bfqlimitdepth is deferencing bfqq from bic without the lock, this can lead to UAF if the iocontext is shared by multiple tasks. This plugin only works with...
changedetection.io: Stored XSS in Watch update via API
Summary A Stored Cross Site Scripting is present in the changedetection.io Watch update API due to unsufficient security checks. Details Tested on changedetection.io version v0.50.24 console REPOSITORY TAG IMAGE ID CREATED SIZE ghcr.io/dgtlmoon/changedetection.io latest 0367276509a0 23 hours ago...
EUVD-2025-50820
changedetection.io: Stored XSS in Watch update via API...
Malicious code in polymer-io-sgdahsdi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbc40711336e7d840192390a12d5b7624731b6409fe433ea79121bcb481211c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-137503
Malicious code in polymer-io-sgdahsdi npm...
EUVD-2025-123034
Malicious code in pyxis-quark-io-request npm...
EUVD-2025-112420
Malicious code in io-charon-dactyl-pyxis npm...
EUVD-2025-116196
Malicious code in barnard-frontend-airbnb-io npm...
EUVD-2025-112419
Malicious code in io-elektra-chakra-ui-configstore npm...
EUVD-2025-112406
Malicious code in io-unuk-pegasus-concurrently npm...
EUVD-2025-115710
Malicious code in capella-rocket-io-betelgeuse npm...
EUVD-2025-122322
Malicious code in sagitta-io-mutation-process npm...
EUVD-2025-112407
Malicious code in io-sagitta-morgan-nightwatch npm...