CVE-2025-60693

A stack-based buffer overflow exists in the getmergemac function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function concatenates up to six user-supplied CGI parameters matching 05 into a fixed-size buffer a2 without proper bounds checking, appending...

PT-2025-46815

Name of the Vulnerable Software and Affected Versions WebToffee Order Export & Order Import for WooCommerce versions through 2.6.7 Description The software contains a flaw related to incorrectly configured access control, allowing for unauthorized access. The issue impacts the Order Export & Orde...

PT-2025-46840

Name of the Vulnerable Software and Affected Versions Zoom Workplace for Android versions prior to 6.5.10 Description Improper authorization handling in Zoom Workplace for Android may allow an unauthenticated user to escalate privileges via network access. An unauthenticated attacker can exploit...

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.5.10, which stems from susceptibility to cross-site scripting attacks that may affect system integrity...

VulnCheck KEV: CVE-2022-4984

ZenTao Biz 6.5, ZenTao Max 3.0, ZenTao Open Source Edition 16.5, and ZenTao Open Source Edition 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database...

AZL-70109 CVE-2025-40193 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in procwritesimdisk A malicious user could pass an arbitrarily bad value to memdupusernul, potentially causing kernel crash. This follows the same pattern as commit ee76746387f6 "netdevsim:...

AZL-70076 CVE-2025-40195 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: mount: handle NULL values in mntnsrelease When calling in listmount mntnsrelease may be passed a NULL pointer. Handle that case gracefully...

AZL-70103 CVE-2025-40197 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is released...

CVE-2024-48829

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code 'Code Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

EUVD-2025-135720

Malicious code in tearich-racing6 npm...

MAL-2025-174762 Malicious code in hokage-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa9f48421c4eec67b22b732ece1ea5af0a336ae90bbdc52a3c3f46d6a9e87d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137006

Malicious code in riya-6 npm...

EUVD-2025-139888

Malicious code in nokire-kushina6 npm...

Malicious code in ananda-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 373c589d7548e96d53a79a2b9d44ea6f1b874bd3a5bf1c2e13d1251ff1d499f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e289c693a97a7b3984c3d8ab3ce3325af2918aa6d9f7876e1e5259c96ac4e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d694693906da58b627f72d139f0dd41986ae0eedcf242285c83db95af156a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178988 Malicious code in tearich-new6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a55c742066d674693fac46ce718483fa9f4c3578c07fa0cf800bc89d5ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135721

Malicious code in tearich-racing6 npm...

Malicious code in hokage-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae94bc8026fdffc19364a26b1475c1fc1896d88d8353984b46b7fb78b0bcfe88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174790 Malicious code in hokage-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c627f0a66556cfa67adfe4d471eb691402ab7964941138852313cb92a0381c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...