51 matches found
MAL-2025-162789 Malicious code in nokire-lokcek35 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1483dea53ce65da1654b1f723c6d3b09027334bf23fb5b8203f3d21725dec6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-150914 Malicious code in @miptaa02/reya (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f555e866ee0ade359fb443b2f7caabbdb5371a108b5d758f614b4fe7b3f3600b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-157447 Malicious code in kapaogfao-safa-agada (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7180dc028ae3db4c32b0ec88f517a269162a25f51331e4773b3c53dad4a6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-135453 Malicious code in maman-mieayam76-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2aa81af2e080bcbeb05a1d7cb4ca5ac912e5e543ddb69821f5bbcb86f68f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nurul-keripik45-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1769e1a0d884e99b4535c4f1478e45e7732a3234fa3f722b3ac7f6d662ab726e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nurul-tempe86-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a96fcbda9d108e550307cf4e9913cb942bd4d6e868be3e29651564dec56ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2018-13475
Malware in sbrugna...
EUVD-2017-9569
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2020-25702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10...
CVE-2017-18453
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure
GitHub Desktop is an open-source, Electron-based GitHub app designed for git development. Prior to version 3.4.20-beta3, an attacker convincing a user to view a file in a commit of their making in the history view can cause information disclosure by means of Git attempting to access a network...
SUSE CVE-2024-46701
In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...
DEBIAN-CVE-2024-46701
In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...
AZL-49318 CVE-2024-46701 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...
The vulnerability of the Did_set_langmap() function in the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the Didsetlangmap function in the Vim text editor is related to the use of sprintf to write to the error buffer, which is passed to functions that handle option renames. Exploiting this vulnerability allows an attacker to execute arbitrary code...
SUSE CVE-2020-6812
The first time AirPods are connected to an iPhone, they become named after the user's name by default e.g. Jane Doe's AirPods. Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that...
Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission
The Mozilla Foundation Security Advisory describes this flaw as: The first time AirPods are connected to an iPhone, they become named after the user's name by default e.g. Jane Doe's AirPods. Websites with camera or microphone permission are able to enumerate device names, disclosing the user's...
Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission
The Mozilla Foundation Security Advisory describes this flaw as: The first time AirPods are connected to an iPhone, they become named after the user's name by default e.g. Jane Doe's AirPods. Websites with camera or microphone permission are able to enumerate device names, disclosing the user's...
