Malicious code in ade-bakso11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61dc130141d60b4aa4f8b0e0249db32508fb8cc252b65417605b0c5081742f91 The package ade-bakso11-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50705 Malicious code in wawan-kacang94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce1fa1c04de13d7c64adb1e128d260b8fdfd73ddace23c62d49a47989332421 The package wawan-kacang94-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51200 Malicious code in candra-kue65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260ed5e00997d7db83516f96fe0fa5d832de9a19d33a6ae40d4b45c73acc45a The package candra-kue65-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in gilang-kembang11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121f6337e969b21e5299de5acc69c7fc0b9817accb326fad07118600df210554 The package gilang-kembang11-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50066 Malicious code in cici-nasiuduk79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3041ecbb730c65dcbf94eb47435c4fca9dafd141ad8f44ced46647435ecb984c The package cici-nasiuduk79-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50157 Malicious code in citra-oncom78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87cc053a3390a9e1cda3cebc470c0dd7aa1d2b6693883800a0bfa0ec62598d0 The package citra-oncom78-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50757 Malicious code in adyen-web-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b6c05640ee26217a85a428224b5a1a72790f5efec2d036828cb3cda0afa5ab The package adyen-web-v5 was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded npm...

MAL-2025-51118 Malicious code in budi-kue21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cd2a7e61982590b5a70c602a3418e27c4786d917121fcdd5468d32ec5e44af The package budi-kue21-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...

MAL-2025-51917 Malicious code in fitri-pecel16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5114a830844e63464686117f15426282ea33bf7fb96812f1339c2f67c6e02620 The package fitri-pecel16-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

RUSTSEC-2025-0136 Underflow in aes_key_unwrap function

The aeskeyunwrap function would panic if passed a ciphertext that was too short. In a debug build, it would panic due to a subtraction underflow. In a release build, it would use the small negative quantity to allocate a vector. Since the allocator expects an unsigned quantity, the negative value...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989741 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4fcrecordmodifiedinode Current code does not fully takes care of...

ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)

Summary CVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but the fix is incomplete and ineffective. The latest version 7.1.2-5 remains vulnerable to the same integer overflow attack. The patch added BMPOverflowCheck but placed it after the overflow occurs, making it useless. A maliciou...

GHSA-9PP9-CFWX-54RM ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)

Summary CVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but the fix is incomplete and ineffective. The latest version 7.1.2-5 remains vulnerable to the same integer overflow attack. The patch added BMPOverflowCheck but placed it after the overflow occurs, making it useless. A maliciou...

CVE-2025-62968

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Stored XSS.This issue affects WP Last Modified Info: from n/a through = 1.9.2...

CVE-2025-62968

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Stored XSS.This issue affects WP Last Modified Info: from n/a through = 1.9.2...

CVE-2025-62968 WordPress WP Last Modified Info plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Stored XSS.This issue affects WP Last Modified Info: from n/a through = 1.9.2...

EUVD-2025-35977

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Stored XSS.This issue affects WP Last Modified Info: from n/a through = 1.9.2...

CVE-2025-62968 WordPress WP Last Modified Info plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Stored XSS.This issue affects WP Last Modified Info: from n/a through = 1.9.2...

CVE-2025-62968

CVE-2025-62968 is a Stored XSS vulnerability in the WordPress plugin WP Last Modified Info (wp-last-modified-info) due to improper input neutralization during web page generation. Affected range is WP Last Modified Info: from n/a through

CVE-2025-62968: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Stored XSS.This issue affects WP Last Modified Info: from n/a through = 1.9.2...