EUVD-2025-147773

Malicious code in tehah-nutay-ko npm...

EUVD-2025-147851

Malicious code in tehah-kalian-ko npm...

MAL-2025-169039 Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2023-33760

Malicious code in bioql PyPI...

EUVD-2023-30312

Malicious code in bioql PyPI...

EUVD-2025-24764

Malicious code in bioql PyPI...

CVE-2025-49057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ko Min WP Voting wp-voting allows Reflected XSS.This issue affects WP Voting: from n/a through = 1.8...

CVE-2025-49057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ko Min WP Voting wp-voting allows Reflected XSS.This issue affects WP Voting: from n/a through = 1.8...

CVE-2025-49057

CVE-2025-49057: Reflected XSS in WordPress plugin WP Voting (versions n/a through 1.8). The vulnerability arises from improper input neutralization during web page generation, enabling cross-site scripting. Affected software: WP Voting

CVE-2023-26515

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ko Takagi Simple Slug Translate plugin = 2.7.2 versions...

CVE-2023-2254

The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup, and we consider it a low risk...

The vulnerability of the wireless network driver mt_7615.ko software for Sonos audio devices allows a hacker to execute arbitrary code.

The vulnerability of the wireless network driver mt7615.ko of Sonos audio devices is related to stack buffer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: policy-controller-fips, zot, falcoctl, chainctl, tkn, tekton-chains-fips, tkn-fips, slsa-verifier, melange, apko, neuvector-sigstore-interface, gitsign, zarf, ko-fips, wolfictl, kubescape, skaffold, spire-server-fips, vexctl, aactl, tekton-chains,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, zot, falcoctl, chainctl, tkn, tekton-chains-fips, tkn-fips, slsa-verifier, melange, apko, neuvector-sigstore-interface, gitsign, zarf, ko-fips, wolfictl, kubescape, skaffold, spire-server-fips, vexctl, aactl, tekton-chains,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: trivy, zot, dagger, tkn, up, melange, grype, conftest-fips, syft, cadvisor-fips, wolfictl, cadvisor, conftest, ctop, kubescape, buildkitd, docker-compose, kaniko, kargo, loki, spire-server-fips, cilium-cli, aactl, prometheus, crossplane, buf, ko, spire-server...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: trivy, zot, dagger, tkn, up, melange, grype, conftest-fips, syft, cadvisor-fips, wolfictl, cadvisor, conftest, ctop, kubescape, buildkitd, docker-compose, kaniko, kargo, loki, spire-server-fips, cilium-cli, aactl, prometheus, crossplane, buf, ko, spire-server...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller, caddy, kube-rbac-proxy, bank-vaults, goreleaser, kots, apko, rabbitmq-messaging-topology-operator, guac, rook, cloudflared, k3s, kargo, nerdctl, rekor, policy-controller, skaffold, dgraph, falcoctl, skopeo, temporal, aactl, dex,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: policy-controller-fips, trivy, zot, crane, argo-workflows-fips, falcoctl, kubevela, timoni, nerdctl, scorecard, dagger, up, flux-helm-controller, slsa-verifier, helm-fips, kots, kubeflow-katib, flux-image-reflector-controller, gitsign, helm, zarf, cadvisor-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, trivy, zot, crane, argo-workflows-fips, falcoctl, kubevela, timoni, nerdctl, scorecard, dagger, up, flux-helm-controller, slsa-verifier, helm-fips, kots, kubeflow-katib, flux-image-reflector-controller, gitsign, helm, zarf, cadvisor-fips,...