MAL-2025-51425 Malicious code in citra-martabak8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b382d7f55cdfd68f07a6ee9c673d7a16ca7c53ab33223a3481e34a398563a24 The package citra-martabak8-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-49961 Malicious code in budi-rawon46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458344617da456846d0d4ec726ef92401b0e6724dec419f4b580be9e30711c90 The package budi-rawon46-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-52721 Malicious code in wibowo-keripik73-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e371d15c3a402096514abe38685fb5fd48a2d137722fa57fac437a1032674eb4 The package wibowo-keripik73-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51092 Malicious code in bella-telurtahu63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348af0d231720b668884faffbe8636f0190afb84cc9450e31ca4da5684f3fdb2 The package bella-telurtahu63-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51967 Malicious code in gilang-mangut17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca6210b580c09f8d28a0b3490e8fa1331d6c1574a6e26ebc251ade7e386aa3 The package gilang-mangut17-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50736 Malicious code in ade-buburayam30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee6f2ee72a3c452f0b10537e827dfa98d03d1107cd89f12f113faa95856e099 The package ade-buburayam30-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51091 Malicious code in bella-telur94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ea24888c9044c8153bf092ae6e08037894539b3ee0363363f3376b0499b941 The package bella-telur94-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Fedora: Security Advisory for rust-names (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: rust-names-0.14.0-2.fc39

A random name generator with names suitable for use in container instances, project names, application instances, etc...

Fedora: Security Advisory for rust-names (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-names-0.14.0-2.fc40

A random name generator with names suitable for use in container instances, project names, application instances, etc...

Subrion CMS 4.2.1 Shell Upload

Exploit Title: File Upload Bypass to RCE Authenticated Google Dork: N/A Date: 17/05/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version: SubrionCMS 4.2.1 Tested on: Debian9, Debian 10 and Ubuntu 16.04 CVE :...

LocalTapiola: Possibly big authorization problem in Lähitapiola´s varainhoito

Issue The reporter found a design flaw in a feature where pdf-reports are generated. Pdf-reports were generated using 19-digit random names and the names as well as the reports were persistent and accessible by all authenticated users. Fix Guessing a random 19-digit name was found to be almost...