SAP NetWeaver Enterprise Portal 安全漏洞

SAP NetWeaver Enterprise Portal is a Web front-end component of SAP NetWeaver from SAP, Germany. A security vulnerability exists in SAP NetWeaver Enterprise Portal that originates from an unauthenticated attacker being able to inject JNDI environment properties or pass URLs used during a JNDI...

PT-2025-46225

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal affected versions not specified Description An unauthenticated attacker can inject JNDI environment properties or provide a URL during JNDI lookup operations. This could allow access to an unintended JNDI...

Malicious code in dying_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76ef207e84f9cf657e92bab51ec5b850ffd1bb57aeebf545c14fac9b9aa9c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60817 Malicious code in marine_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75330045da18607cb3fc0cff327b0a9949892d5e686bd7de39e1a8051c2c864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56941 Malicious code in iwan-rawon20-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079b547834d5527507baa2d57771289cfd846f8d1f396b480346195ee577d7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59064 Malicious code in udin-miebogor7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f55788754d77bf7f0ceb1cacecdec09e38e3c6cb89abb3e326caa180363817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55046 Malicious code in accurate_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b98300ba19497f9105743fc49a9c726671f0c9a4537074c8c19061611ff97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59580 Malicious code in xaver-sroto85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f865f3a46e078288e7db7d0eeb2f35965f5f59c17c70e992785ae9ed064a775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56525 Malicious code in gita-papeda11-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300695bdcbc10506908f1b34bdcb65908fb8b880ee50eab772b76ef8fdd9be5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55340 Malicious code in bayu-rangginang79-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f60c70a2bc777c563f0866c609be7bdbc0b22abb52be95579a1d015b8530f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-lengko94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83888882fe4f26dbfa7fe855ca0000d45834b8202787ba3464b60a8cba28778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53036 Malicious code in joko-takokak71-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5242f4bad2527fcdd593e09e1516143c385b4b8f7b5ac369f9a4f4a1093800de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-brengkes44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162a14a95b3823849f48d1a08841c3be2a86dc6f0c7091468b97cde36eb515ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64164 DataEase is vulnerable to Oracle JNDI Injection

Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...

CVE-2025-64164 DataEase is vulnerable to Oracle JNDI Injection

Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection Java Naming and Directory Interface injection. This issue is fixed in version 2.10.15...

CVE-2025-64164

DataEase (open source data visualization tool) is affected in versions

PT-2025-45170

Name of the Vulnerable Software and Affected Versions Dataease versions 2.10.14 and below Description Dataease is an open source data visualization analysis tool. Versions 2.10.14 and below do not properly filter when establishing JDBC connections to Oracle, which can lead to a Java Naming and...

Creating a Linux Application Using VSCodium, Cline, OpenRouter, and Claude

In March I created a Windows Application Using Visual Studio Code, Cline, OpenRouter, and Claude. This was a program that created square screen captures. The user doesn't need to manually ensure the dimensions are a square. The program makes the window grow and shrink while keeping the length equ...

EUVD-2025-36757

Malicious code in react-naming-convention npm...

Malicious Package

Overview react-naming-convention is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...