CVE-2026-64827

CVE-2026-64827 affects Telenia Software TVox 26.5.3 and earlier in 26.x and 24.x lines. The root cause is an authentication bypass in set_env.php: redirectToLoginAdminIRequestHaveAccessToken() derives the current page name from PHP_SELF and skips authentication when it equals 'login_admin.php'. T...

CVE-2026-64827

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in setenv.php where the redirectToLoginAdminIRequestHaveAccessToken function derives the current page name from PHPSELF and skips authentication when the value...

MAL-2025-57055 Malicious code in joko-rawon72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1114e929d2be99efa8e878371c3ff5486f271ed6ce62c517d703ba05d54b04fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...