IngEstate Server 安全漏洞

IngEstate Server is a real estate asset management and information service platform developed by IngEstate Server Inc. IngEstate Server v11.14.0 contains a security vulnerability. This vulnerability stems from an editing function on the software package list page that allows for stored cross-site...

MAL-2025-189917 Malicious code in theta-yaml-compress-rain-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8013a642dfebede233931896060c06f35aed6cb508521a5070519d705a68b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f5f764f1beff158d84e1a38746d85c2d0b33d44aa595d85d4617172d801b8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136671 Malicious code in rifqi-tahu37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10433949d2726c9ba85783e047bb1e1f98181a43db1431530ffa3e4a2a52bd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102207 Malicious code in erwin-keripik7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75629f1dd3d9d7b84865c6398cc013a21e50354744f80ec13b4aba531dc59470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lupis14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf23dfe71ae1ec3711265ef528b53e1f32878e82c3ab6c0b48428825b269512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-tahu69-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e8266cedc06999b057169fc333689334a98fc338328939d8a31b77840004c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-6076

Malicious code in bioql PyPI...

CVE-2025-27642

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...

CVE-2025-27642

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...

CVE-2025-27642

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...

PT-2025-9749 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 Description: The issue allows unauthenticated editing of driver packages. Recommendations: For versions prior to Virtual Appliance Host...

CVE-2025-27642

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...

CVE-2025-27642

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...