2720 matches found
MAL-2025-160157 Malicious code in masako-males-n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ceac201a669ab5580d2d5eb02cad3fd744a6aa39459c4c411d4e4f43b68fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in munir-nautyt-n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689d55276275d8494e05a3ef1afd8b74ddfd019eae73b9f0b4ebb39ef594ced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-160897 Malicious code in munir-n-nubliesp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e3ab4d7b2a9cb8f5025fbc79e1c9d2658f22610b39e5397652d372ea7ddbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-9316
N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...
CVE-2025-11700
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-11367
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11366
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11367
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11700
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-11366
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11367
The CVE-2025-11367 entry affects the N-central Software Probe (windows) prior to version 2025.4. The vulnerability relies on deserialization, allowing remote code execution with network access and no authentication. Impact is described as full compromise of affected systems (high confidentiality,...
CVE-2025-11367 N-central windows software probe Remote Code Execution
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11367 N-central windows software probe Remote Code Execution
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11366 N-central Authentication bypass via path traversal
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11366
Summary: CVE-2025-11366 affects N-able N-central, versions prior to 2025.4, with an authentication bypass via path traversal. The issue enables bypassing login controls by manipulating file paths, exposing high-privilege access. Impact: high confidentiality, integrity, and availability risks may ...
CVE-2025-11366 N-central Authentication bypass via path traversal
N-central 2025.4 is vulnerable to authentication bypass via path traversal...
CVE-2025-11700 N-central Multiple XXE Injection Vulnerabilities
N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...
CVE-2025-11700
N-able N-Central is affected by CVE-2025-11700. Versions earlier than 2025.4 are vulnerable to an XML External Entity (XXE) injection, enabling information disclosure. Remediation: upgrade to version 2025.4 or later.