TencentOS Server 3: php:8.0 (TSSA-2023:0257)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0257 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Siemens SCALANCE and RUGGEDCOM Devices Use After Free (CVE-2024-56581)

btrfs: ref-verify: use-after-free after invalid ref action. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504648; scriptversion"1.3";...

EUVD-2025-197607

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the POST /api/v4/users/userid/email/verify/member endpoint. An attacker can obtain sensitive information, such as password hashes and MFA secrets, by sending crafted requests to this endpoint. Remediation Upgrad...

CVE-2025-11794

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

CVE-2025-11794 Password hash and MFA secret returned in user email verification endpoint

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

SUSE CVE-2025-40129

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...

PT-2025-46949

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.x through 10.5.11 Mattermost versions 10.11.x through 10.11.3 Mattermost versions 10.12.x through 10.12.0 Description The software does not properly sanitize user data, potentially allowing system administrators to...

CVE-2025-11794: Exposure of Sensitive Information to an Unauthorized Actor

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

Siemens SIMATIC S7-1500 Uncaught Exception (CVE-2024-28835)

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the certtool --verify-chain command. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Malicious code in verify-ayic-iamusaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f3b297c092b5258be0c6c34da4b6e6b7f0df16c7568ea80f499c69d5fe193c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misuanuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd55cdcaceee8c17267dd774f7cebe43e2c0f7cde17dafa0dfc9ff4831d49a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146500

Malicious code in verify-ain-ukasiamunisa npm...

EUVD-2025-146536

Malicious code in verify-aikun-miaiaku npm...

EUVD-2025-146517

Malicious code in verify-ain-misua npm...

EUVD-2025-146522

Malicious code in verify-ain-aiusamakili npm...

Malicious code in verify-aya-amil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4dd738127b97d6ba6d876359f7ba5439193f3db8b453eb2406abac5bc6d85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146479

Malicious code in verify-aya-auial npm...

EUVD-2025-146487

Malicious code in verify-aya-amili npm...

Malicious code in verify-aiun-misuanuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17bbf3893de1d4848a248bfa69a87fed300cc9606459f263bdefa40bc6b178a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...