4180 matches found
MAL-2025-139027 Malicious code in specific-harlequin-guan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8c570f0355b8e840e96d244c36e23baa6e548a9df27cb96b73cc2756c8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
WordPress plugin Specific Content For Mobile – Customize the mobile version without redirections SQL注入漏洞
WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin...
CVE-2025-11454: Improper Neutralization of Special Elements used in an SQL Command
The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eosscfmduplicatepostasdraft function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of...
PT-2025-46701
Name of the Vulnerable Software and Affected Versions Lenovo Dock Manager affected versions not specified Description An improper default permission issue exists in Lenovo Dock Manager. Under specific installation conditions, an authenticated local user may be able to redirect log files with...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an MSR access error that could result in a register write failure...
EUVD-2025-102113
Malicious code in specificrhinocerosz3n npm...
CVE-2025-12434
Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-12728
Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
EUVD-2025-88696
Malicious code in specificcougarz3n npm...
CVE-2025-11208
Inappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-8998
It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account...
CVE-2025-8998
It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account...
EUVD-2025-73584
Malicious code in specificwildfowlrequirement npm...
EUVD-2025-73583
Malicious code in specificxerinaez3n npm...
Malicious code in specific_xerinae_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f846292980ce3426dad02aa3b5149af23b853d537d7c9eae967d23ff3642c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in specific-bronze-guanaco (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e8981ac8d6dfb6a2c43c9cb57d095b077f25272bdda9aab002af736f9f43e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in specific-gray-meerkat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec98726663947735cdbde4427037c4b2efaad08ccb3c50cc54a136d2276ab7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in specific-purple-crane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cff8eac12a9d0d0b65bf76c7bd45342fd52c74c529aff84b95a23505c1e1d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...