EUVD-2025-147433

Malicious code in tusaaya-dgd-s npm...

EUVD-2025-147430

Malicious code in tusaaya-s-rfe npm...

EUVD-2025-147417

Malicious code in tusaaya-sd-s npm...

EUVD-2025-147428

Malicious code in tusaaya-s-ters npm...

MAL-2025-169384 Malicious code in tusaaya-s-ters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6730d0ca72db59a35393e9f5206f9355d543e4242a8edf5c04b8d7a6133a32f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159859 Malicious code in mansila-tla-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d473934d3bd406031e812bb37aa93827c6e490db64f278010bf406ee8d160e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169408 Malicious code in tusaya-s-rfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f874022aeb13f88c7be6863a7fd58724ac473a727542cd16127518fda0dd414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-sd-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e95799d8502d5f569614f75649dc7e54871d4c2e508deafd899473424e44ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-bakwan71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8996b73edb18c7395dafb25c463fa3267749cdb4d3b43c998c4738a1b3f288e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several products, including SAP NetWeaver, SAP Business Connector, SAP HANA, and SAP S/4HANA. The vulnerabilities include deserialization, code injection, insufficient validation, and information disclosure. These vulnerabilities can be exploited by attackers to...

CVE-2025-63154

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the addEffect parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2025-12197

The The Events Calendar plugin for WordPress is vulnerable to blind SQL Injection via the 's' parameter in versions 6.15.1.1 to 6.15.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2025-12197 The Events Calendar 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via s

The The Events Calendar plugin for WordPress is vulnerable to blind SQL Injection via the 's' parameter in versions 6.15.1.1 to 6.15.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticat...

CVE-2025-12197

The CVE-2025-12197 affects The Events Calendar WordPress plugin (versions 6.15.1.1–6.15.9). The issue is a blind SQL Injection in the s parameter caused by insufficient escaping and lack of proper query preparation, allowing unauthenticated attackers to append additional SQL and potentially exfil...

PT-2025-45070

Name of the Vulnerable Software and Affected Versions The Events Calendar plugin for WordPress versions 6.15.1.1 through 6.15.9 Description The Events Calendar plugin for WordPress is susceptible to a blind SQL injection issue. This is due to inadequate escaping of user-provided input and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989724 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: filter out EXT4FCREPLAY from on-disk superblock field sstate The EXT4FCREPLAY bit in...

CVE-2025-10748

The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-10748

The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-10748

CVE-2025-10748 affects the RapidResult WordPress plugin. It allows SQL Injection via the s parameter in all versions up to and including 1.2. The vulnerability arises from insufficient escaping of user input and inadequate preparation of the SQL query, enabling authenticated attackers with contri...

CVE-2025-10748 RapidResult <= 1.2 - Authenticated (Contributor+) SQL Injection

The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...