Malicious code in tunis-kit-gahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a84de994ae4925e86eee873c3e8b523aae9ac07745ccb7ca2ee9b2f086cd403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1e9f7fe755e50439044873fa2790218cc859a9f306ab853f68105f2350652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavowi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007cb22d1aa3da6579b4f3b05a3b35f842ec54564e0efbc8fee0998e1b68fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998557e88f30e429d750c6479e121f91f9d19ba418100ea549609e8187f927ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogavfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4540878abcde8a4b80055452ef5f0dc8932906cf9ca5d4261b0a84d4841b49a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185265 Malicious code in tunis-kit-gahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a84de994ae4925e86eee873c3e8b523aae9ac07745ccb7ca2ee9b2f086cd403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185269 Malicious code in tunis-kit-gahufadudi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f1805eba3dbecf2b1e3d99bac34e6a6f1357cf99ca9d99e6a5135c09dbcd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185341 Malicious code in unise-kit-bogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c64805fe2b37966b2797bfdde96f85332ed5ccc73aaeb1589e2d993ce821852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185349 Malicious code in unise-kit-bogv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92347916918f56164ae183eb2603fd3163d27cf2d58caa6aac7879824f88797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61830

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

EUVD-2025-131909

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

EUVD-2025-93390

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

CVE-2025-61830

Adobe Pass (Android SDK) versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability that allows bypass of security controls to read/write data. Exploitation requires user interaction (victim installs a malicious SDK). The issue is discussed across multiple advisories (CVE...

ROS-20251111-03

Vulnerability of mlx5 driver Poll Mode Driver of DPDK package is related to incorrect data processing when working with Mellanox network devices. with Mellanox network devices. Exploitation of the vulnerability could allow an attacker, remotely to cause information disclosure or denial of service...

PT-2025-46518

Name of the Vulnerable Software and Affected Versions Adobe Pass versions 3.7.3 and earlier Description An Incorrect Authorization issue exists in Adobe Pass. An attacker could bypass security measures and gain unauthorized read and write access. Exploitation requires user interaction, specifical...

[SECURITY] Fedora 41 Update: dotnet9.0-9.0.111-1.fc41

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

SUSE SLES15: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2025:3996-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3996-1 advisory. Upgrade to upstream tag jdk-11.0.29+7 October 2025 CPU: - CVE-2025-53057: Fixed unauthenticated attacker can achieve...

CLSA-2025-1762538077 dpdk: Fix of CVE-2024-11614

CVE-2024-11614: add bounds check in vhostdequeueoffload to prevent checksum computation overflow...

PT-2025-45320

Unrestricted Upload of File with Dangerous Type vulnerability in Rometheme RTMKit rometheme-for-elementor.This issue affects RTMKit: from n/a through = 1.6.5...

MAL-2025-191926 Malicious code in wayspiritmcp-tpa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 523cbbda7a0fda2addfcd432b1bfcc1df072ee67a593ffce535b7da7005caae8 Package seems to provide an MCP server, but in fact contains attempts to make an LLM agent break safeguards. As the request is about leaves just a flag, it see...