MAL-2025-50186 Malicious code in dewanto-lepet37-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c260437fdd66a56cc0024a37f96b55c30f715ab7b1b55b8949aa2468e0568f The package dewanto-lepet37-crottsekebon was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign th...

Malicious code in cindy-lumpur73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7187aaf130f8a66635fd78efd02cf382afbea5e9286daf149639549dcd221546 The package cindy-lumpur73-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50779 Malicious code in agus-rujaksoto34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9b388d3aa36edc1b0ef86d364b9b75ad340eada6cbc8591d458539ce38c068 The package agus-rujaksoto34-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2020-18739

Malware in sbrugna...

EUVD-2011-0486

Malware in sbrugna...

EUVD-2018-19405

Malware in sbrugna...

EUVD-2017-6295

Malware in sbrugna...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

SUSE CVE-2011-0466

The API in SUSE openSUSE Build Service OBS 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a 1 package or 2 project via unspecified vectors...

GHSA-8823-XPHR-QW9V Gentoo Portage does not verify X.509 certificates from SSL servers

The urlopen function in pym/portage/util/urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate...

cPanel Protection Mechanism Bypass Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A protection mechanism bypass vulnerability exists in versions of cPanel prior to 88.0.13. An attacker can exploit this vulnerability to bypass the protection mechanism that restricts package modifications...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

Authentication flaw

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

CVE-2020-26109

CVE-2020-26109 affects cPanel prior to version 88.0.13, where a protection mechanism intended to restrict package modification can be bypassed (SEC-557). The public documents consistently describe a bypass vulnerability enabling modification of packages despite the protection. Affected product: c...

CVE-2020-26109: Undefined Security Weakness

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

PT-2020-16292

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.13 Description The issue allows bypass of a protection mechanism that attempted to restrict package modification. Recommendations For versions prior to 88.0.13, update to version 88.0.13 or later to resolve the...

CVE-2017-14806

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...

CVE-2017-14806: Improper Certificate Validation

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Studio onsite susestudio-common version...