CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-24519

Buffer overflow for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-24307

Intel CIP software vulnerability CVE-2025-24307 affects Intel® CIP software prior to WIN_DCA_2.4.0.11001, involving privilege management in Ring 3: User Applications. The flaw may allow an unprivileged, authenticated user with high complexity attack requirements to escalate privileges and manipul...

CVE-2025-20056

CVE-2025-20056 describes improper input validation in Intel VTune Profiler prior to 2025.1, enabling local privilege escalation and potential data manipulation by an authenticated, low-privilege user with no user interaction. Red Hat and ENISA/other sources corroborate the same description. Intel...

CVE-2025-20056

Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may...

Malicious code in kiki-lapis78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75d25da3f26d6ba7a3f03693e136d7ce6abee8a7c8f418c95a8a14b72361f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sasag96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ed30aa2fe03d9d3e322840cf568cadebe2ef8ae4038507216f1d06eb174bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f153fb1e080dfba4fd6cb3ca4d6b45a5c5b84b7ad791690fca8ee6a0e345e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5336858b7c98d6c68d8a3b9ac36e882930a86313d4b35e97f2e0d64c6dfda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-oblok10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d431ac980b99b3d9dce72f228c83189b69c2158077b46a675cda0392b411cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-ketan57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a4b43b0a800d4b728feffeafb99701d48feffab517b87f7c3115d38a6a4473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113907 Malicious code in fascinating_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab95acb50f19e123d8a1e0d86705572819cfc8741a6d547f2d7c26301e636173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117450 Malicious code in tight_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f2e8fe8811faaf09754ea3df9d64db92a5f802bfbd7a9be87763b0479dd09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f63d8a4cdc72ccf7f67d9eec0d680c2af296482a9aa068beb672e65934772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115555 Malicious code in little_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c36fe8dfd1dbca0742cf64ccb8b8a785cd88275c0a89f5bdb84dd3d39c177d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116788 Malicious code in rifqi-nasisayur15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe999f0abcd7c2030ac1e0161a27fe28c20857320487de62cc3ea438a18975b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116169 Malicious code in ogi-asinan43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fadd11d24dc1f8abb30095df4a821e20c95e5ee0675843020ec4eb3a10db431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...