WordPress plugin Survey Maker 安全漏洞

WordPress Survey Maker plugin is a tool for creating questionnaires with support for multiple question types and data analysis features for businesses or individuals to collect user feedback. WordPress Survey Maker plugin suffers from a missing capability check vulnerability, which stems from a...

PT-2025-46793

Name of the Vulnerable Software and Affected Versions Convert WebP & AVIF | Quicq versions prior to 2.0.1 Description The Convert WebP & AVIF | Quicq WordPress plugin is susceptible to unauthorized data modification. This is due to a missing capability check on the wp ajax wpqai disconnect quicq...

HP Integrated Lights-Out Improper Input Validation (CVE-2016-4375)

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 aka iLO 3 firmware before 1.88, Integrated Lights-Out 4 aka iLO 4 firmware before 2.44, and Integrated Lights-Out 4 aka iLO 4 mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause...

HP Integrated Lights-Out Improper Input Validation (CVE-2022-28633)

A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file...

Malicious code in itale-adci-ggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a47633d82f2b108b80973ac743eeee5eeae20a6f983e0cf0deb8eeaf6a77b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c64805fe2b37966b2797bfdde96f85332ed5ccc73aaeb1589e2d993ce821852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddc6c65dee1b85a3729add344226cb2ddad682833ec29d7b4c092844ef57bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ugoofii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff5e6bf5f4ee14a4b56e1e81d4d42021561fa374d57c552f0cfc0a5d1c10661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuloig-tgv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45fad3c317f7cc514747c4530b040bbce8fe7769b33394be472ed89ae27b4d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atm-kujoliaknoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95145fe80d7694cce69d083db5dffa96339896d5652301522bdaf4dc06309de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-gioafii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9212739f7d65e80f6ced398b648ab78ea7f437ee6fac76e602ef524c71ea01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoaigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcc72822b012d66661d2dccdd3fe8529d9693ac2ae09ff2b01113daa03f749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874a66dff72f0157b13a29f6bba165a60ff63fdd13336f65bfa5bb46bf0a2bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ubg-atafug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3b6372948239554de27760b542f9f840b316ee98d71aeb5a5d9b8d8ef5c85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ebe53a80c9704d9270a57862a59ab4d88fc05ac4ec34fa53b6a28b07bd4fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-giks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ae436190f634423a6ff6599cad7f11037a2ec03a63f916ed0bd9b692c62e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akonki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41101cc4bb27b925c7e8bc8298f124114284303203784f25f0fa169a88c37b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabtadami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a3c74a1444d682521a1f61c45aafe12052e8961a3b3d1c4a013630f092b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed76a048ecac2c7dac9ac967f148200b305bb5a2bfaf2029f9baf46afb3e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rrsetrtt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7615dedf69d9a115af6fb44942578d04c144f7f908787477a2de52aefbcccea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...