1998 matches found
GHSA-2W46-VQ8H-98VH Shopware 6's password recovery link does not expire after email change
Summary When a customer changes their email address after requesting a password reset, the old password reset link tied to the previous email remains valid. An attacker with access to the old email inbox is potentially able to reset the customer’s password even after the user changes their email...
Shopware 6's password recovery link does not expire after email change
Summary When a customer changes their email address after requesting a password reset, the old password reset link tied to the previous email remains valid. An attacker with access to the old email inbox is potentially able to reset the customer’s password even after the user changes their email...
Security update for binutils
This update for binutils fixes the following issues: Do not enable '-z gcs=implicit' on aarch64 for old codestreams. Update to version 2.45: New versioned release of libsframe.so.2 s390: tools now support SFrame format 2; recognize "z17" as CPU name bsc1247105, jscIBM-1485 sframe sections are now...
SUSE-SU-2025:4096-1 Security update for binutils
This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestreams. Update to version 2.45: New versioned release of libsframe.so.2 s390: tools now support SFrame format 2; recognize 'z17' as CPU name bsc1247105, jscIBM-1485 sframe sections are n...
EUVD-2025-175946
Malicious code in throw-simple-old-export-info npm...
EUVD-2025-176082
Malicious code in table-old-sun-await-decode npm...
EUVD-2025-179416
Malicious code in daemon-old-mu-interpret-deserialize npm...
EUVD-2025-177476
Malicious code in old-grid-permission-gamma-web npm...
EUVD-2025-177762
Malicious code in moon-old-gamma-deploy-cloud npm...
EUVD-2025-175984
Malicious code in test-theta-old-yaml-eta npm...
EUVD-2025-179689
Malicious code in code-code-old-reject-cat npm...
EUVD-2025-175723
Malicious code in view-warn-bash-rain-old npm...
EUVD-2025-178824
Malicious code in function-iota-sanitize-view-old npm...
EUVD-2025-177475
Malicious code in old-import-decode-table-process npm...
Malicious code in moon-old-gamma-deploy-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5c4869ddd3ada1d30aaaa35c240e8d99748ce6917156ee14dd323fe2ec849a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177155
Malicious code in pipe-grid-byte-old-array npm...
MAL-2025-189929 Malicious code in throw-simple-old-export-info (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7fa0e7015572a5c0c2140d2bd0a0d6d2e85a91da0626aa234799986419d1f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gamma-old-visualize-web-view (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c85b8c83f11198dd37909d77ea949f07b7f4f84ed769cfb14f898b385924bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...