Malicious code in aibopuna-mobile-arpnabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e005d0808956fe5553ae1935bc6ac5fc2f7a78b9c9e7eb839588d6a8273f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-arifaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3d94c2d8acda63743beaba1f6a0b441fb146f663a9659d1e5f285866590bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151936 Malicious code in aibopna-mobile-aramaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae0c2d024057eb5fed288da1bc7af8d3a7271cd4be8c7b6c7def065d9b5dd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-aruai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9bbea69fc6ea4301f5eaf6bcf01ec5a46193bb264c5dd7501eef86e72ec37c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-ara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76515456d4b5dbdc015a99bafbd41f348ed439beb67a0802235b4bcaa988fc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11454

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2025-11454 Specific Content For Mobile – Customize the mobile version without redirections <= 0.5.5 - Authenticated (Contributor+) SQL Injection

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

EUVD-2025-124905

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2025-11454 Specific Content For Mobile – Customize the mobile version without redirections <= 0.5.5 - Authenticated (Contributor+) SQL Injection

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2025-11454

CVE-2025-11454 - WordPress plugin vulnerability details (concrete): The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via eos_scfm_duplicate_post_as_draft() in all versions up to and including 0.5.5. Exploitatio...

WordPress Specific Content For Mobile plugin <= 0.5.5 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Specific Content For Mobile versions = 0.5.5...

EUVD-2025-106791

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 11.4, tvOS 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass ASLR...

WordPress plugin Specific Content For Mobile – Customize the mobile version without redirections SQL注入漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin...

PT-2025-46647

Name of the Vulnerable Software and Affected Versions The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress versions through 0.5.5 Description The plugin is susceptible to SQL Injection due to insufficient escaping of user-supplied parameters and...

Sogexia Android App 安全漏洞

Sogexia Android App is a payment account management mobile application from Sogexia Luxembourg. A security vulnerability exists in Sogexia Android App that originates from the inclusion of hard-coded encryption keys in the encryptionhelper.dart file...

EUVD-2025-103735

Malicious code in mobilelousez3n npm...

EUVD-2025-96432

Malicious code in mobilefowlz3n npm...

EUVD-2025-90047

Malicious code in mobilescallopz3n npm...

EUVD-2025-74445

Malicious code in mobilechinchillateal-17 npm...

Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...