MAL-2025-55738 Malicious code in crucial_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54f97775e61fec5ecf9a618cd318e3bff45def6e6ef64c02152a84683435632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56439 Malicious code in gastric_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16a353f9cdf8ed7955212603f039e06e3fbb0eb4a20f35bbbd6553f24ca077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47536

Malicious code in gastricslugz3n npm...

EUVD-2015-1102

Malware in sbrugna...

EUVD-2012-6479

Malware in sbrugna...

EUVD-2018-7700

Malware in sbrugna...

EUVD-2011-5092

Malware in sbrugna...

EUVD-2025-3304

Malicious code in bioql PyPI...

EUVD-2025-25732

Malicious code in bioql PyPI...

EUVD-2023-30312

Malicious code in bioql PyPI...

EUVD-2023-48597

Malicious code in bioql PyPI...

EUVD-2025-0202

Malicious code in bioql PyPI...

EUVD-2025-6860

Malicious code in bioql PyPI...

EUVD-2023-0600

Malicious code in bioql PyPI...

EUVD-2025-28749

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-29529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific...

CVE-2025-9131

The Ogulo – 360° Tour plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2025-9131

The Ogulo – 360° Tour plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2025-9131 Ogulo – 360° Tour <= 1.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter

The Ogulo – 360° Tour plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

CVE-2025-9131 Ogulo – 360° Tour <= 1.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter

The Ogulo – 360° Tour plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slug’ parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...