Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update

Red Hat JBoss Web Server 5.8.6 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CV...

RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.8.6 (RHSA-2025:22925)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22925 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised o...

TencentOS Server 3: firefox (TSSA-2025:0528)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0528 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

MGASA-2025-0301 Updated apache packages fix security vulnerabilities

HTTP response splitting. CVE-2024-42516 SSRF with modheaders setting Content-Type header. CVE-2024-43204 modssl error log variable escaping. CVE-2024-47252 modproxyhttp2 denial of service. CVE-2025-49630 modssl access control bypass with session resumption. CVE-2025-23048 modssl TLS upgrade attac...

Updated apache packages fix security vulnerabilities

HTTP response splitting. CVE-2024-42516 SSRF with modheaders setting Content-Type header. CVE-2024-43204 modssl error log variable escaping. CVE-2024-47252 modproxyhttp2 denial of service. CVE-2025-49630 modssl access control bypass with session resumption. CVE-2025-23048 modssl TLS upgrade attac...

MAL-2025-186141 Malicious code in child-process-blitz-spawn-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352192e625655a62b387104ffb60a5f639784d2858a0800691396d8f61c4b31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186373 Malicious code in cron-kappa-bash-serialize-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53deafc5f542e358e2be400b3647937108a888871b1dd73316f4f4157605370b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186864 Malicious code in europa-alphard-docusaurus-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd12c80aa354e4a81290deca797d5a0670d28e73a14c4d60a450ca24efb9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187540 Malicious code in iota-less-loader-commitlint-config-angular-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9a2cc8ab09085bacdd14c9dfdd31ec3738bd42d232c1c5a7b3a72c15ab2016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Siemens SIMATIC S7-1500 Improper Handling of Exceptional Conditions (CVE-2019-19924)

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite error handling. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Malicious code in nokire-nakao11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f67c76fc4087adf7f901789c83797ed9ec73edae3769c8f7b3b382162aee9586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb44980d843215317f4d26b1f2328b9f284f756f14deb604eaa210d1dcba54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174966 Malicious code in ira-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a1316be6e726938b9fbccb2dafbd55a69300a8ce029c4357eceb9c4088dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171220 Malicious code in fikrisatria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab503b04ac7b66afa34741e8f33cf9763230d44fc76e20da5cf10633adf83d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171136 Malicious code in eimearobrien (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec779ca800ab1240e0639454e07958720575e4de5269ddc892aae569f84619a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tijfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912c20338aee77a18dd14425e3175085d6b7f165e510e1939b4c4f6de883bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fd0beda889f6c2d11f2000538c4e4e750c554612a884873c557de0cafee81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158977 Malicious code in madan-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad27578850311fe8f6eea3c6e10acd73a6f669be17178c63d35e36bb4dd38f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nulamakuiabn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdb0cd0c4e9d3c4088da2e9205cd396ce278db6ce7d0a417e665ec8245549af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168418 Malicious code in tealove-nameka35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e193639705257453b2f2fcbc6f6facbbb26edac11db43b1efe2f3abe14cdadc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...