EUVD-2025-114412

Malicious code in dorado-supervisor-child-process-cygnus npm...

EUVD-2025-111291

Malicious code in meissa-pino-supervisor-rocket npm...

EUVD-2025-113685

Malicious code in farout-supervisor-phoebe-umbra npm...

EUVD-2025-112002

Malicious code in karma-hermes-supervisor-sedna npm...

EUVD-2025-120978

Malicious code in uninstall-acamar-supervisor-cassini npm...

MAL-2025-143529 Malicious code in ignite-supervisor-mocha-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c036900e6f404ea72aa85a4bf54d4a73318c1e65912111e0b97c5588f50e239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141697 Malicious code in dorado-supervisor-child-process-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3228854c092c2c2db97fc3ce38d83f267b0a435bdf30b7d446f564e17838650e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

EUVD-2025-50785

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

CVE-2025-63384

The RISC-V Rocket-Chip (version 1.6 and earlier) contains a privilege retention vulnerability due to a flaw in the SRET (Supervisor-mode Exception Return) instruction handling. The processor fails to correctly transition from Machine-mode (M-mode) to Supervisor-mode (S-mode) as required by the ss...

Rocket Chip Generator 安全漏洞

Rocket Chip Generator is an open source Sysem-on-Chip design generator from CHIPS Alliance Open Source. A security vulnerability exists in Rocket Chip Generator v1.6 and earlier versions, which stems from a failure of the SRET instruction to properly convert processor privilege levels, which coul...

PT-2025-46191

Name of the Vulnerable Software and Affected Versions RISC-V Rocket-Chip versions 1.6 and earlier Description A flaw exists in the handling of the SRET Supervisor-mode Exception Return instruction within the processor. Instead of correctly transitioning from Machine-mode M-mode to Supervisor-mode...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

CVE-2025-63384

A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET Supervisor-mode Exception Return instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode M-mode to Supervisor-mode S-mode as specified by...

CVE-2025-11887

The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...

WordPress plugin Supervisor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

EUVD-2025-35819

The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...

CVE-2025-11887

Summary (CVE-2025-11887) : The WordPress Supervisor plugin (versions ≤ 1.3.2) is vulnerable to unauthorized modification of data due to a missing capability check across several AJAX endpoints. authenticated attackers with Subscriber-level access or higher can update plugin settings. The vulnerab...

CVE-2025-11887 Supervisor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...