Malicious code in tuti-gembus14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1f1769112a2911f590bcbb57100b3a19e588c7be859f682fe8c758b3f93e52 The package tuti-gembus14-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in fadhil-mieaceh6-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866d73d45e7f80632bb01daf667673065c16eb899d8bb91d11fff8a7d43f95b4 The package fadhil-mieaceh6-devapp was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in tomi-nasipecel96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed258a4db6d0eae96e30c977b9dd0d2af0fc13a33c9996a3d73d07b4e6934aec The package tomi-nasipecel96-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in candra-lengko4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b640e95942b0a028eb5a6b76b28845de730bf6794f450493d4bd760398a61f88 The package candra-lengko4-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in dian-ketoprak60-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af6db2228f123a81b8a2487bab64a7813204898ce5632323f4c1807e421b3aa The package dian-ketoprak60-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51309 Malicious code in cici-sambalado32-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5023f379ca3ff874b77dd0106fe408e52133d1352fb8bbb09eae99b8bcb5bb18 The package cici-sambalado32-wekto was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in eko-lepet54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba52775a0f40c515b1d31dfbc714b254055342775ccd50a4e6420a0cdff0c648 The package eko-lepet54-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in vera-rendang17-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c71c272a1bbaad8d89eb38e31ad7a797e10da6878f0924f0f36b7ab98ab089 The package vera-rendang17-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51907 Malicious code in fitri-lumpur18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1776bfa10e6d6a2a5fc8a2c8e0c61d82dcf2e8012ddc7e8f68e4e030215032d5 The package fitri-lumpur18-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

CVE-2025-12926

A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the...

CVE-2025-12927

A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archivesadd.php. Such manipulation of the argument flags leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may b...

EUVD-2025-38731

A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archivesadd.php. Such manipulation of the argument flags leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may b...

CVE-2025-12924

A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. This issue affects the function GlobalResult of the file src/main/java/com/rymcu/forest/web/api/bank/BankController.java. The manipulation leads to missing authorization. The attack may be initiated...

CVE-2025-12924 rymcu forest BankController.java GlobalResult authorization

A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. This issue affects the function GlobalResult of the file src/main/java/com/rymcu/forest/web/api/bank/BankController.java. The manipulation leads to missing authorization. The attack may be initiated...

EUVD-2025-38722

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-45584

A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /ImportCRFData?action=confirm of the component CRF Data Import. Performing manipulation of the argument xml file results in path traversal. The attack can be initiated remotely...

CVE-2025-12920

FoxCMS up to 1.2.16 contains a cross-site scripting vulnerability in the add/edit path (app/admin/controller/Product.php, Title parameter). The issue can be triggered remotely and an exploit has been published; vendor did not respond. Affected versions should be updated to mitigate; as a workarou...

EUVD-2025-38720

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...

EverShop is vulnerable to Unauthorized Order Information Access (IDOR)

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...

CVE-2025-12919

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...