EUVD-2025-131922

A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

EUVD-2025-131909

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...

EUVD-2025-131912

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

MAL-2025-172303 Malicious code in augis-pomo9r-nusfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8b8f9965cc0ed1b2180348071247f4d2da865605bd0ddf458193ef97283b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172607 Malicious code in verts-otimon-ogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d872cb297818c843979df19ba96cb5749ce1d6e9959133537ca33c1899969b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-145066

Malicious code in rafaelrocha npm...

Malicious code in alyssaadams (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0312a194e9a9a5d8e68d55243e4e4137dd749dcc1debfacca229961ba84986fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171724 Malicious code in planetplanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13082571953383e36893dedaeafb207ca1bc7a35e244964bddb2fe7d7544c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146007

Malicious code in ameennaseem npm...

EUVD-2025-144977

Malicious code in se7enstar npm...

EUVD-2025-144927

Malicious code in solarhunter npm...

MAL-2025-170787 Malicious code in alexanderwhite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342cd5c3c12f415d40217860aa78a43c0b7050c997f83913a5149d847bafd783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146127

Malicious code in agussurya npm...

EUVD-2025-145537

Malicious code in gracesmith npm...

EUVD-2025-145269

Malicious code in maqsoodabdul npm...

Malicious code in saadimran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edbfa7baf2c55bc1c8fc984e80ec112f9efd5a53d0c54f5166f197cb465b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-24314

Improper access control for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may...

CVE-2025-24307

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable data manipulation. This...

CVE-2025-24862

Unrestricted upload of file with dangerous type for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data...

CVE-2025-32088

Improper conditions check for some IntelR QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially...