Malicious Package

Overview lint-aquarius-morgan-ora is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview dagda-ora-vortex-rigel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

CVE-2026-30291

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30291

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30291

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30291

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30291

Ora Tools PDF Reader (Reader & Editor APPv4.3.5) contains an arbitrary file overwrite vulnerability during the file import process . Attackers can exploit this flaw to overwrite critical internal files, potentially resulting in arbitrary code execution or information exposure . No specific remedi...

Ora Tools PDF Reader 安全漏洞

Ora Tools PDF Reader is a document reading tool developed by Ora Tools Corporation in China. It supports browsing and basic processing of PDF files. There is a security vulnerability in the APPv4.3.5 version of Ora Tools PDF Reader. This vulnerability stems from the possibility of arbitrary file...

CVE-2026-30291: External Control of File Name or Path

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

PT-2026-29531

An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

python security update

2.7.5-94.0.3 - Fix for CVE-2025-12084 Orabug: 38902314...

firefox security update

140.4.0-4.0.1 - Update to 140.4.0 ESR Orabug: 38595697CVE-2025-11708CVE-2025-11709 CVE-2025-11710CVE-2025-11711CVE-2025-11712CVE-2025-11714 CVE-2025-11715...

EUVD-2025-177665

Malicious code in neptune-framework-cors-ora npm...

EUVD-2025-178703

Malicious code in global-docusaurus-postcss-ora npm...

EUVD-2025-177563

Malicious code in node-sass-luna-ora-terser-webpack-plugin npm...

EUVD-2025-177422

Malicious code in ora-polaris-uranology-planckscale npm...

EUVD-2025-178876

Malicious code in fomalhaut-ora-cybernetics-publish npm...

EUVD-2025-179987

Malicious code in borealis-hercules-ora-lyra npm...

EUVD-2025-179325

Malicious code in dependencies-taurus-dotenv-safe-ora npm...

Malicious code in update-leda-ora-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e252313c23c3c5509c627db3eebcfc9456566db411c0497086f9794cb39f2fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...