CVE-2026-1612: Use of Hard-coded Credentials

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

Malicious code in budi-ko-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143186

Malicious code in budi-ko-rusmaya npm...

Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169039 Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147851

Malicious code in tehah-kalian-ko npm...

EUVD-2025-147773

Malicious code in tehah-nutay-ko npm...

EUVD-2023-30312

Malicious code in bioql PyPI...

EUVD-2023-33760

Malicious code in bioql PyPI...

EUVD-2025-24764

Malicious code in bioql PyPI...

CVE-2025-49057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ko Min WP Voting wp-voting allows Reflected XSS.This issue affects WP Voting: from n/a through = 1.8...

CVE-2025-49057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ko Min WP Voting wp-voting allows Reflected XSS.This issue affects WP Voting: from n/a through = 1.8...

CVE-2025-49057

CVE-2025-49057: Reflected XSS in WordPress plugin WP Voting (versions n/a through 1.8). The vulnerability arises from improper input neutralization during web page generation, enabling cross-site scripting. Affected software: WP Voting

CVE-2025-49057: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ko Min WP Voting wp-voting allows Reflected XSS.This issue affects WP Voting: from n/a through = 1.8...

CVE-2023-26515

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ko Takagi Simple Slug Translate plugin = 2.7.2 versions...

CVE-2023-2254

The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup, and we consider it a low risk...

mt_7615.ko Wireless Code Execution

The vulnerability of the wireless network driver mt7615.ko of Sonos audio devices is related to stack buffer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2023-50809: Stack-based Buffer Overflow

In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code executio...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: melange, spire-server-fips, tkn-fips, aactl, flux-source-controller, kubescape, tkn, wolfictl, ko, spire-server, tekton-chains, zot, gitsign, goreleaser, falcoctl, policy-controller, tekton-chains-fips, skaffold, falcoctl-fips, neuvector-sigstore-interface, apko,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: melange, spire-server-fips, tkn-fips, aactl, flux-source-controller, kubescape, tkn, wolfictl, ko, spire-server, tekton-chains, zot, gitsign, goreleaser, falcoctl, policy-controller, tekton-chains-fips, skaffold, falcoctl-fips, neuvector-sigstore-interface, apko,...