MAL-2025-65157 Malicious code in rina-tempe50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9ed5aeb626d2d6995f7c9a9ecef8fd063541766f838c137021f13d9ec9f30e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-42884

CVE-2025-42884 affects SAP NetWeaver Enterprise Portal. The issue allows an unauthenticated attacker to inject JNDI environment properties or pass a URL during JNDI lookup, enabling access to an unintended JNDI provider and potentially leading to disclosure or modification of server information (...

Intel QuickAssist Technology 安全漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. It improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A security vulnerability exists in Intel QuickAssist Technology prior to version 2.6.0, which is caused...

Intel CIP 安全漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from mismanagement of privileges and can be exploited by an attacker to cause elevation of...

PT-2025-46380

Name of the Vulnerable Software and Affected Versions Intel VTune Profiler versions prior to 2025.1 Description A flaw exists in Intel VTune Profiler that may allow an escalation of privilege. An unprivileged software adversary with an authenticated user and a low complexity attack may enable dat...

PT-2025-46542

Name of the Vulnerable Software and Affected Versions LOGO! 12/24RCE 6ED1052-1MD08-0BA2 affected versions not specified LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 affected versions not specified LOGO! 230RCE 6ED1052-1FB08-0BA2 affected versions not specified LOGO! 230RCEo 6ED1052-2FB08-0BA2 affected...

Intel QAT 安全漏洞

Intel QAT Windows software refers to the collection of Intel® Data Protection and Compression Acceleration Technology software components that provide support for the Windows operating system. The Intel QAT Windows software has a buffer overflow vulnerability that originates from a buffer overflo...

WordPress Easy Digital Downloads plugin order manipulation vulnerability

WordPress Easy Digital Downloads plugin is a free plugin designed for WordPress to create and manage a digital merchandising store that supports the sale of downloadable content such as eBooks, software, media and more. WordPress Easy Digital Downloads plugin suffers from an order manipulation...

CVE-2025-12919

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...

CVE-2025-43079

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges...

Malicious code in governing_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588289189718432160b8f306b7695ca6b683fddee132ec923dfbd3537f14c674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61567 Malicious code in varied_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e32a8bf536316e295e9789d024cb197e67f4449db3c5afdee2a7b5c5ffd186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60486 Malicious code in flexible_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9553f1d1f3f80c6e6f0e62592f60db9d394c1b87bd7edaa344e3298e5e7774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf0540b0fedbd8106e999664e4336860b6fb49b8c07de13b3236581b7324dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5c477bc1d3e500aa14e7c9a026cb947eb40f3c23cfd03b3244ee0298ce130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbab9d2c09c1f305ada32c2446129005a22a86538c5672e8d192f424e1bd243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d863f968dc886cc9fd45a57b58a891b798afc81007213802aee677fa46caefad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198598fee1faff0c3cdba3b17186c57812feb48ff5adcfb0b0eff9ad21a63528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60568 Malicious code in grand_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51090528a6f3b2b6e28a4b146cbd0ea7a3fdea9740810cb0332a870c13bef629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60164 Malicious code in consistent_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f356ac3bb620efb4c870f6ece0296e1793d9673c8a85f6b548b84adb06ad0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...