1463 matches found
TencentOS Server 4: etcd (TSSA-2025:0331)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0331 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
CVE-2025-64046
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting XSS in /system/update-run.php...
Average Hardness of SIVP for Module Lattices of Fixed Rank
The problem of finding short vectors in Euclidean lattices is a central hard problem in complexity theory. The case of module lattices i.e., lattices which are also modules over a number ring is of particular interest for cryptography and computational number theory. The hardness of finding short...
MAL-2025-184564 Malicious code in oc-gua-vsji (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f25427cddd2fca1ba5c107964ac0451e681b356ddef82d85f80d1effff2283e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-24327
Insecure inherited permissions for some IntelR Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local co...
Malicious code in tealove-nanami26 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8557d62622b9a05564198ac149ddeacec9e77efe33719019efdf28af7cb2740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-150354 Malicious code in @mipta19/dcde (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cec395afecf0f15fafb5f9db72d8edce8ec4d393d642efa4415fe82e15bb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Attackers accelerate, adapt, and automate: Rapid7’s Q3 2025 Threat Landscape Report
The Q3 2025 Threat Landscape Report, authored by the Rapid7 Labs team, paints a clear picture of an environment where attackers are moving faster, working smarter, and using artificial intelligence to stay ahead of defenders. The findings reveal a threat landscape defined by speed, coordination,...
EUVD-2025-117138
Malicious code in rapid-turquoise-mule npm...
MAL-2025-138964 Malicious code in rapid-turquoise-mule (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f200365c9f71994dbc02253eea8ba63182e43b73b5ffa0c9fbd44cd1b34364fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-136531 Malicious code in rapid_impala_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865ad08a825d4c78192ecae103d020d6275dd4a65a70b7c381a0bd57d992ac0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102721
Malicious code in rapidclownfishz3n npm...
Malicious code in rapid_tuna_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6325bda1bf35fe1f810ccf80a2d9b3ee4d063ccff4f97c44110aea4a68126b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-93522
Insecure inherited permissions for some IntelR Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local co...
CVE-2025-24327
Insecure inherited permissions for some IntelR Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local co...
CVE-2025-24327
Intel(R) Rapid Storage Technology Application vulnerable before version 20.0.1021 due to insecure inherited permissions in Ring 3: User Applications, enabling escalation of privileges and potential local code execution by an authenticated, low-privilege user with high attack complexity and local ...
CVE-2025-24327
Insecure inherited permissions for some IntelR Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local co...
CVE-2025-24327
Insecure inherited permissions for some IntelR Rapid Storage Technology Application before version 20.0.1021 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local co...
