MAL-2025-138058 Malicious code in wibowo-rawon100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239d30b5c7531ab8d980afbfd75844ee13b0f8cc6660f1e194cfd911c4ddc183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-semur10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a6a9c4cac68b5e3169eece18b0d06ad80f31a8000fcbc16d16d5113e341d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2024-4286: Improper Neutralization of Special Elements used in an Expression Language Statement

Mintplex-Labs' anything-llm application is vulnerable to improper neutralization of special elements used in an expression language statement, identified in the commit id 57984fa85c31988b2eff429adfc654c46e0c342a. The vulnerability arises from the application's handling of user modifications by...

CVE-2024-23593: Improper Validation of Specified Quantity in Input

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to modify the boot manager and escalate privileges...

CVE-2012-4820

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600,...