EUVD-2025-140131

Malicious code in min-sohyun-srasasdsav npm...

EUVD-2025-140129

Malicious code in min-te-srasasdsav npm...

EUVD-2025-140130

Malicious code in min-te-ret npm...

MAL-2025-176132 Malicious code in min-sohyun-srasasdsav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b7b06b985750722762e256ed7791eda57cd6f1428cd43a3f41a3c5dc449455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munisdr-nserf-min (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be9540eddbb48ff1d326228efce27851a96fd90b8e7807a65f43114e4f5f40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puteri-min-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12699d88101a176a995f499feafc8e6074463923e5c65debe4644c241a601988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164559 Malicious code in puteri-min-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12699d88101a176a995f499feafc8e6074463923e5c65debe4644c241a601988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164411 Malicious code in polymedr-min-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bab6e8077ea60b4977aea30022dba0b1666c712f19c8bd9b96b11c59e3f14fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

PT-2025-49076

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc4-djwx Description The Linux kernel contains a flaw related to out-of-bounds memory access during symlink repair within the XFS filesystem. Specifically, an incorrect calculation in the min function lead...

PT-2025-51522

Уязвимость функции sb min blocksize модуля fs/fat/inode.c файловой системы ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить привилегии или вызвать отказ в обслуживании...

CVE-2025-63422

Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.0.final) +3 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (4.2.0.final)

org.keycloak:keycloak-services MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

org.keycloak:keycloak-account-freemarker (1.0.3.final), org.keycloak:keycloak-dependencies-server-all (1.0.3.final) +3 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (1.0.3.final)

org.keycloak:keycloak-services MAVEN version 1.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.3.final -...

org.keycloak:keycloak-authz-policy-drools (3.4.1.cr1), org.keycloak:keycloak-dependencies-server-all (3.4.1.cr1) +6 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (3.4.1.cr1)

org.keycloak:keycloak-services MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.1.cr1 -...

dk.grinn.keycloak:keycloak-migrate-resource (11.0.3.0), dk.grinn.keycloak:keycloak-migrate-spi (11.0.3.0) +10 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (11.0.3)

org.keycloak:keycloak-services MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource 11.0.3.0 - dk.grinn.keycloak:keycloak-migrate-spi...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.1.0-alpha.2, <=1.1.0-beta.1), org.keycloak:keycloak-account-freemarker (1.1.0.final) +2 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (1.1.0.final)

org.keycloak:keycloak-services MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.1.0-alpha.2, =1.1.0-beta.1 -...

org.keycloak:keycloak-dependencies-server-all (1.9.8.final), org.keycloak:keycloak-dependencies-server-min (1.9.8.final) +2 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (1.9.8.final)

org.keycloak:keycloak-services MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final -...

de.adorsys.multibanking:keycloak-custom-secret-provider (>=1.3.0, <=1.20), org.keycloak:keycloak-authz-policy-drools (3.1.0.final) +5 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (3.1.0.final)

org.keycloak:keycloak-services MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.multibanking:keycloak-custom-secret-provider =1.3.0, =1.20 -...

org.keycloak:keycloak-account-freemarker (1.1.1.final), org.keycloak:keycloak-dependencies-server-min (1.1.1.final) +1 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (1.1.1.final)

org.keycloak:keycloak-services MAVEN version 1.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.1.1.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.2.final), org.keycloak:keycloak-dependencies-server-min (1.9.2.final) +2 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (1.9.2.final)

org.keycloak:keycloak-services MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.2.final -...