EUVD-2025-176392

Malicious code in short-shell-data-private-bash npm...

MAL-2025-189233 Malicious code in rho-object-test-char-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9efa550c99c9e9618cc08596bdd81ee7ec3ef19c63291d58ac245ccc618c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176642

Malicious code in rho-object-test-char-shell npm...

EUVD-2025-178442

Malicious code in import-uglify-shell-assert-key npm...

EUVD-2025-180149

Malicious code in bad-hash-shell-interpret-compress npm...

EUVD-2025-180081

Malicious code in big-data-shell-omega-reject npm...

EUVD-2025-176406

Malicious code in shell-double-gamma-shell-kappa npm...

EUVD-2025-176407

Malicious code in shell-class-encrypt-info-zeta npm...

EUVD-2025-176403

Malicious code in shell-process-eta-star-omicron npm...

EUVD-2025-177218

Malicious code in phi-shell-old-old-pi npm...

EUVD-2025-178595

Malicious code in hash-warn-async-private-shell npm...

EUVD-2025-176470

Malicious code in sed-shell-cat-encrypt-parse npm...

EUVD-2025-176404

Malicious code in shell-omicron-dog-bash-simple npm...

EUVD-2025-179160

Malicious code in emulate-link-shell-async-double npm...

EUVD-2025-176405

Malicious code in shell-integer-optimize-log-promise npm...

CVE-2025-60701

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...

CVE-2025-60701

The CVE-2025-60701 issue affects the D-Link DIR-882 router, specifically firmware DIR882A1_FW102B02. The vulnerability stems from the prog.cgi function sub_433188 and the rc binary’s sub_448FDC, where user-supplied EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, and AccountName are stored ...

PT-2025-46795

Name of the Vulnerable Software and Affected Versions Supermicro BMC Insyde SMASH affected versions not specified Description The Insyde SMASH shell program within Supermicro BMC contains a stacked-based overflow issue. This flaw could allow for remote code execution. Recommendations At the momen...

Supermicro BMC 安全漏洞

The SuperMicro BMC is a firmware from SuperMicro USA used in devices such as servers, top-of-rack switches or RAID devices. A security vulnerability exists in Supermicro BMC that stems from a stack-based buffer overflow in the Insyde SMASH shell program...

Siemens SIMATIC S7-1500 Improper Neutralization of Special Elements used in a Command (CVE-2014-7209)

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...