1489 matches found
MAL-2025-58378 Malicious code in riana-brongkos8-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6aafa096839bd2d004f5e54758d005c707411645564f19fa8000ffa674a2b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-53849 Malicious code in ogi-gado-gado67-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94d5828545f462b005c704b929e2bc115597e41a94d5cf0d5df45e6a3fc0a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kresna-brongkos44-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4bdcdfa9c8fadb88d9e73dbb4a78e00a9ddac715857f71e6e731efa3f6b4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tania-lepet36-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1d561c5396d950905b4b384949f4c441da360af2b5f8a7d3bf063d0c81e6db The package tania-lepet36-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...
Malicious code in wibowo-kupang23-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6210f13d44c0500c85a1a99f2c3ed999b44f3559804e4ae81a0eb66a006d7c89 The package wibowo-kupang23-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
MAL-2025-50924 Malicious code in bambang-takokak21-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adf6b6c830e2bb934d9660ec219b81de12c144a9d6edebe2643a29bf56ec8dd The package bambang-takokak21-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
MAL-2025-50889 Malicious code in bambang-kepok59-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1d5f34d72d97fa5efb7da9b234cc2f17418c0825b7cc12e83ed31be1867177 The package bambang-kepok59-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Important: tomcat10
Issue Overview: Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could...
Important: tomcat
Issue Overview: Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could...
RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 6.1.3 (RHSA-2025:19809)
The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19809 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...
tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve
A flaw was found in Apache Tomcat's rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use...
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If...
tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE
A directory traversal vulnerability in Apache Tomcat caused by improper URL normalization during request rewriting. When specific rewrite rules are used, an attacker could craft a malicious request to bypass access restrictions and reach protected directories such as /WEB-INF/ or /META-INF/. If...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 6.1.3 release and security update
Red Hat JBoss Web Server 6.1.3 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...
tomcat: Apache Tomcat: Bypass of rules in Rewrite Valve
A flaw was found in Apache Tomcat's rewrite rule processing component. This vulnerability allows security constraints to be bypassed via specially crafted HTTP requests when specific, uncommon rewrite rule configurations are in use...
BIT-TOMCAT-2025-55752 Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled
Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the...
Infinite loop
Overview Affected versions of this package are vulnerable to Infinite loop via the applysubstitution function in the bsdtar when used with -s pathname-rewrite rules. An attacker can cause excessive memory allocation leading to application crash by supplying malicious input such as an empty patter...
Exploit for CVE-2025-55752
CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability A...
SUSE CVE-2025-55752
Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the...