CVE-2025-64428

Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the patch for version 2.10.14. However, JNDI injection remains possible via the iiop, corbaname, and iiopname schemes. The vulnerability has been fixed...

CVE-2025-64428 DataEase DB2 JNDI Vulnerability

Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the patch for version 2.10.14. However, JNDI injection remains possible via the iiop, corbaname, and iiopname schemes. The vulnerability has been fixed...

Dataease 注入漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. Used to help users quickly analyze data and gain insight into business trends to achieve business improvement and optimization. An injection vulnerability exists in versions prior to Dataease 2.10.17 , whic...

Release Information for Veeam ONE 13.0.1 RTM Patch 0

Update Applicability This "Patch 0" update for Veeam ONE 13.0.1 is strictly intended for deployments using the RTM release build 13.0.1.5860. If Veeam ONE 13.0.1 GA build 13.0.1.5924 is installed, this update can be ignored as it is not needed. All resolved issues listed in this article were foun...

SUSE-RU-2025:4131-1 Recommended update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor

This update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAPMigration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor fixes the following issues: Changes for suse-migration-sle16-activation: - Simplify interface naming by disabling predictable names at boot...

CVE-2025-13227

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-13102

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

MAL-2025-187147 Malicious code in genomics-outercore-mongoose-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9599af6ad25dd61bdaaada8e8915ddc13209f52f00cd009dee659067e46b311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186199 Malicious code in cold-hot-beta-log-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a7f8a4e041fa30770c77c28ed0ed77e8a0b512d546aac9d12dff4a25c02072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185735 Malicious code in bad-kappa-spy-fire-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd357cac25b9b3eb95f0ee24e2f44d4765d6fcd28cc491590ab1b7e043b31da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186772 Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb6d3787cd8e826342e1a35672bcd802bf1f5e183672c196cde0b5b219fdc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-meissa-stream-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e201ad4797f6c1d0adc706095b06d260333b5a1677e61717564549f492ee379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-aoan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bf154c5946019e6b144b54d55e67c4fed573cad4a4b6d095f49cf1a3b2d722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcami-lasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b7cc53acbbf9353d58fe43267fa8d26ab2870a7144012364a074a478f1a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-inuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc0a4a32082b9bbcd779fe505d685506c57839244bb683c4c60c0943622525b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iobloa-minisspe-amiialo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8337c3a5b1b76082c9782b6a6ecbadcdfe392e6b31b0c63190a21b21445a780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmin-mix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291519c98b9c19daf53c25d08409e3a3f43fc53fe0cb8f05c6a59624d6d9b1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174940 Malicious code in inul-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa702424ed65d4a2d1c17bd0363e9cadea29b2a30fa42ea1d8edfbcfc0bf0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179248 Malicious code in tray-uozp-pustr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbdf7e34bcdd42c233a3c22568ae4c8b20fd8fb8dd2ddac197225a33c4de42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176538 Malicious code in nokire-tanjiro49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63247c0a96e0f78d55d9031e151095838048a99c6ca6919382269115317937aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...