Malicious code in wawan-sambel72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230215ac9ba8d61594e83fc094f5563914478e749880445c890ad7a49b02246f The package wawan-sambel72-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in agus-bakso48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9594260bff019def4f9e94efeb55e7cda34cee8e4a28e33460d9d2cf94303ae4 The package agus-bakso48-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bayu-getas2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6dfff33350402599991b5d9049cccf90f9d5380e87202f8768220b869085475 The package bayu-getas2-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in utomo-tahutek82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0de66762386b0d310e2fe899a881c85be9d4a888320827baf709e6ba8b1de9 The package utomo-tahutek82-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in budi-wajit8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd4bde6cdd571a8d2a5a6aeabc4d44a2ccf752caf31c8f09b5f64512b408b5e The package budi-wajit8-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in bambang-ragi86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3ccf2ea05133353ad4ccb5f1fb3db351ac82ff2b8cef82894b9068d4a2ffa9 The package bambang-ragi86-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51433 Malicious code in citra-nasicampur77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1763985198bf25f1cdda7b59be073dd48494fd11b3e24ba7c1dbca544b31d3c The package citra-nasicampur77-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52545 Malicious code in umi-jamblang2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf653dc5f6dbc7d96eb75483c719e516402c7a89b622046159de6ee7e09606c1 The package umi-jamblang2-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in eko-rangginang89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1fee5c01df6b3030e6658d1747f6fba0b1fc4956157532c9c30a16605da7e The package eko-rangginang89-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

EUVD-2003-0132

Malware in sbrugna...

EUVD-2025-25025

Malicious code in bioql PyPI...

CVE-2025-9426

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...

CVE-2025-9426

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...

CVE-2025-9426 itsourcecode Online Tour and Travel Management System package.php sql injection

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...

CVE-2025-9426 itsourcecode Online Tour and Travel Management System package.php sql injection

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been...

CVE-2025-9426

CVE-2025-9426 affects itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is a SQL injection in an unknown part of the file /package.php triggered by manipulating the subcatid parameter. Exploitation is network-based and can be performed remotely; several sources note tha...

CVE-2025-9118 Dataform Path Traversal

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...

itsourcecode Online Tour and Travel Management System 安全漏洞

itsourcecode Online Tour and Travel Management System is an open source online tour and travel management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which is caused by a SQL injection due to misuse of the...

PT-2025-34719 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A weakness exists in itsourcecode Online Tour and Travel Management System 1.0, affecting an unknown part of the file /package.php. Manipulation of the subcatid...

CVE-2025-9052 projectworlds Travel Management System updatepackage.php sql injection

A vulnerability was identified in projectworlds Travel Management System 1.0. This affects an unknown part of the file /updatepackage.php. The manipulation of the argument s1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and m...