PT-2025-46603

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4-custom+ 283 Description The Linux kernel contains a flaw related to handling symbolic links when the block size is larger than the page size bs ps within the Btrfs filesystem. Specifically, the issue...

PT-2025-46663

Name of the Vulnerable Software and Affected Versions N-central Software Probe versions prior to 2025.4 Description The N-central Software Probe is susceptible to Remote Code Execution through deserialization. No authentication is required for exploitation. Recommendations Update to a version of...

PT-2025-46712

Name of the Vulnerable Software and Affected Versions Symfony versions 2.0.0 through 5.4.49 Symfony versions 6.0.0 through 6.4.28 Symfony versions 7.0.0 through 7.3.6 Description Symfony’s HttpFoundation component’s Request class incorrectly parses the PATH INFO value. This can result in URLs bei...

CentralSquare Community Development 安全漏洞

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7, which stems from an authentication bypass that could result in unauthorized acces...

Malicious code in zain-tahu88-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5d35e99bf3b6fc02024d46b417f82496a3a625e451ca7f50b57d037bbe09c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-otak-otak17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e861f3033859743a7e33bb2db0798ba79f0120f1d9ec72d8d037d1b9ba11a325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-rangi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4fb84ec95dbc5f74a38922aaec73b258130ac79b361e62e492c71fd6b38a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131921 Malicious code in ade-sambalado10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714db63464f30b53a13473533860b6b4212e4d41652fffd9e558c19ceaeb9219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-jus76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c162a39ba4b4d63336ba381268b1f4bb9b13e4c11a719675fc4cdcbe7d53b4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6796f2973db648c6967ebbdd4f3a32155caf475704411820c25664db5820a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ikan5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8649b2a1fd9bdded99a573b459ce9cf3c3110a70fb998617521c921fc602a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93390

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

CVE-2025-40827

A vulnerability has been identified in Siemens Software Center All versions V3.5, Solid Edge SE2025 All versions V225.0 Update 10. The affected application is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system...

Malicious code in wibowo-semur74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbe9bda01adbabcbc34d2d116b5c7065518c2962828821a0bb50493047f9df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-101802

Malicious code in tiara-naget84-riris npm...

EUVD-2025-100699

Malicious code in vulnerableturkeyz3n npm...

Malicious code in cognitive_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e00247abc8ce946848d32ca39bc2a87ad6ebcf10f5a82e15b96db20512ed501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-100077

Malicious code in xaver-sasag85-wekto npm...

MAL-2025-126504 Malicious code in fauzi-rojak61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c08233f76ce3380c67d7934a396618ea33b5c15033cfbab505e274ef6a16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ragi60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c61d534404b6298faa410c72a45dbdea292875f3a21d04877dd55c27c44d11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...