36445 matches found
EUVD-2025-51590
Malicious code in technical-silver-narwhal npm...
EUVD-2025-51593
Malicious code in technical-blush-baboon npm...
Malicious code in technical-amber-moth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298709f5fc96e2d6aa1c0e20c9fd4c361838f4969217f8b295cfacbea2347e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51595
Malicious code in technical-aquamarine-woodpecker npm...
EUVD-2025-51591
Malicious code in technical-rose-antelope npm...
EUVD-2025-57080
Malicious code in technicalrattlesnakez3n npm...
CVE-2025-42882: Missing Authorization
Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with basic privileges could execute a specific function module in ABAP to retrieve restricted technical information from the system. This disclosure of environment details of the system...
SAP NetWeaver Application Server for ABAP 安全漏洞
SAP NetWeaver Application Server for ABAP is a core application server platform from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server for ABAP that stems from a lack of authorization checking and could lead to a low-privileged attacker retrieving restricted...
EUVD-2025-49225
Malicious code in technicaltiglonz3n npm...
Strings in the maze: Finding hidden strengths and gaps in your team
Welcome to this week's edition of the Threat Source newsletter. "The truth about the world, he said, is that anything is possible... For existence has its own order and that no man's mind can compass, that mind itself being but a fact among others." ― Cormac McCarthy, "Blood Meridian" Earlier thi...
CVE-2025-58120
When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-48008
When a TCP profile with Multipath TCP MPTCP enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS ar...
CVE-2025-61960 BIG-IP APM portal access vulnerability
When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-55036 BIG-IP SSL Orchestrator vulnerability
When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy connect feature is enabled, undisclosed traffic may cause memory corruption. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-58153 BIG-IP HSB vulnerability
Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge HSB may experience a lockup of the HSB. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
PT-2025-42339
Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description Hardware systems with a High-Speed Bridge HSB may experience a lockup of the HSB under undisclosed traffic conditions and conditions beyond the attacker's control. Software versions that hav...
CVE-2025-61998: Improper Neutralization of Input During Web Page Generation
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager. Injected content is executed in the context of other users when they click the malicious link. Successful exploitation allows the...
Cyber Slavery Infrastructures: A Socio-Technical Study of Forced Criminality in Transnational Cybercrime
The rise of "cyber slavery," a technologically facilitated variant of forced criminality, signifies a concerning convergence of human trafficking and digital exploitation. In Southeast Asia, trafficked individuals are increasingly coerced into engaging in cybercrimes, including online fraud and...