EUVD-2025-117326

Malicious code in historical-yellow-walrus npm...

MAL-2025-138877 Malicious code in misleading-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd494484dfd8d481213be418ca55214d411a83c445c5ade866277dc5fe6a7537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

K000157365: Moment vulnerability CVE-2022-31129

Security Advisory Description moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment more specifically rfc2822 parsing, whi...

Frappe Learning 信息泄露漏洞

Frappe Learning is an easy-to-use open source learning management system from Frappe Open Source. An information disclosure vulnerability exists in Frappe Learning version 2.0.0 through versions prior to 2.41.0, which stems from improper access control and could lead to viewing other students'...

Linux Distros Unpatched Vulnerability : CVE-2025-13025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145. CVE-2025-13025 Note that Nessu...

PT-2025-46709

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.1.0 Description Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' issue. A low...

PT-2025-46603

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4-custom+ 283 Description The Linux kernel contains a flaw related to handling symbolic links when the block size is larger than the page size bs ps within the Btrfs filesystem. Specifically, the issue...

PT-2025-46663

Name of the Vulnerable Software and Affected Versions N-central Software Probe versions prior to 2025.4 Description The N-central Software Probe is susceptible to Remote Code Execution through deserialization. No authentication is required for exploitation. Recommendations Update to a version of...

CentralSquare Community Development 安全漏洞

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7, which stems from an authentication bypass that could result in unauthorized acces...

PT-2025-46712

Name of the Vulnerable Software and Affected Versions Symfony versions 2.0.0 through 5.4.49 Symfony versions 6.0.0 through 6.4.28 Symfony versions 7.0.0 through 7.3.6 Description Symfony’s HttpFoundation component’s Request class incorrectly parses the PATH INFO value. This can result in URLs bei...

Malicious code in jaja-rangi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4fb84ec95dbc5f74a38922aaec73b258130ac79b361e62e492c71fd6b38a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-tahu88-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5d35e99bf3b6fc02024d46b417f82496a3a625e451ca7f50b57d037bbe09c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-otak-otak17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e861f3033859743a7e33bb2db0798ba79f0120f1d9ec72d8d037d1b9ba11a325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131921 Malicious code in ade-sambalado10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714db63464f30b53a13473533860b6b4212e4d41652fffd9e558c19ceaeb9219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-jus76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c162a39ba4b4d63336ba381268b1f4bb9b13e4c11a719675fc4cdcbe7d53b4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ikan5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8649b2a1fd9bdded99a573b459ce9cf3c3110a70fb998617521c921fc602a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6796f2973db648c6967ebbdd4f3a32155caf475704411820c25664db5820a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93390

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

CVE-2025-40827

A vulnerability has been identified in Siemens Software Center All versions V3.5, Solid Edge SE2025 All versions V225.0 Update 10. The affected application is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system...