1881 matches found
VulnCheck KEV: CVE-2025-24354
imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXYALLOWLOOPBACKSOURCEADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50264)
vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans. During loopback communication, a dangling pointer can be created in vsk-trans, potentially leading to a Use-After-Free condition. This plugin only works with Tenable.ot. Please visit...
EUVD-2025-177593
Malicious code in nightwatch-loopback-delphinus-ursa npm...
Malicious code in quark-loopback-palynology-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d40ef0f2be07d54e6e36d6b88eb13d24800f9598149a61a58a5a23014e5074d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178331
Malicious code in isostasy-loopback-docusaurus-inflation npm...
EUVD-2025-179422
Malicious code in dactyl-loopback-axios-lacerta npm...
EUVD-2025-178594
Malicious code in hawkingradiation-aether-mesosphere-loopback npm...
Malicious code in dactyl-loopback-axios-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177241
Malicious code in perturbation-css-loader-loopback-uninstall npm...
EUVD-2025-177228
Malicious code in phenomic-loopback-rigel-mechatronics npm...
EUVD-2025-178146
Malicious code in leda-loopback-markdown-pdf-quasar npm...
Malicious code in nightwatch-loopback-delphinus-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178952
Malicious code in express-superflare-antares-loopback npm...
EUVD-2025-177065
Malicious code in prettier-stylelint-astrobiology-loopback-sirius npm...
MAL-2025-189522 Malicious code in sirius-robotics-loopback-cosmicray (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38eb13f98b3458601a765f9efbca06c33a9e1a9086540f8ca1f2940d44a09139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188783 Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187736 Malicious code in leda-loopback-markdown-pdf-quasar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72689640fd1bfbbd21c0574fe0c4447c9f2ee55a6e3143380a55a797f7f3c422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179192
Malicious code in eigenstate-spectron-loopback-wormhole npm...