PT-2025-46949

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.x through 10.5.11 Mattermost versions 10.11.x through 10.11.3 Mattermost versions 10.12.x through 10.12.0 Description The software does not properly sanitize user data, potentially allowing system administrators to...

CVE-2025-11794: Exposure of Sensitive Information to an Unauthorized Actor

Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/userid/email/verify/member endpoint...

Siemens SIMATIC S7-1500 Uncaught Exception (CVE-2024-28835)

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the certtool --verify-chain command. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Malicious code in verify-ai-aisai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222ae743035d6f9b11b3e42d3795d9c7cb71dbdee9f887922c45bb52e8e9707b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusamakuii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088ee8ac2b4c0e2c741bd22d0b905e6670f2ea7903ff0653960ef10a8f22a52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-misaaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4b43fb30991ca8f061d00dd4cc70b497d517bb3012199042bb45ac201508ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-smisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333e1759399d850232031406b7285c368c17619ef339ebb2064848f782518b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-ukasiamuisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf5d86863a885e228dfcd4437abdb9e5194f8751f1fc957652bc0107bc07cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-mi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70122132d3e2f72ca21e61521daa42d3f665700c576b55bdd41fb9d2eab679b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-miaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b692155750f71977bb11bf43f44618ad8e85e3d6568a319da2a573b543c9a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-miau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a13a7acbfdf1222621a1e0e6503c4311d382035a1e1fe451cfaf865a68be9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-mik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c3a62295e891116edf312160e7b3b791559f01c06031a01f0bfdf3646a2b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75d5496798dc2b42cf187da2c3f8b5356831d74c6c5f0b8fc74a9b5041440a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misuanuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd55cdcaceee8c17267dd774f7cebe43e2c0f7cde17dafa0dfc9ff4831d49a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misuanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca2108caa852cc0264f4ced7d032d3ed3261ad589536c0e551e80945f60fd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-sua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9050e5948f3aa7bfc74f04c05246f5bcff48b120192eb278d1f661ad12b800a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-sulap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cdacead516615fcb81516a72715827fdefdc8118a7f1141f496a40dbc8c2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-sulapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99797ecc9d6f08c8efb9620d44ffcf0711171bd83ac89fceef83ca995492b94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-sulapaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc43292fc4c039a8a4970b3b6e3103af46600f392a6c85bd54b225c690abe187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debb4ce171e9ff2a0fed8e72df999de7a42c2192905c7d056eb2ed0abf8f2576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...