CVE-2020-7236

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= Site Name field of the Site Setup section...

CVE-2013-7054

D-Link DIR-100 4.03B07: cli.cgi XSS...

CVE-2013-6027

Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/toolsmisc.xgi...

SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 Appliances

SonicWall has rolled out fixes to address a security flaw in Secure Mobile Access SMA 100 series appliances that it said has been actively exploited in the wild. The vulnerability, tracked as CVE-2025-40602 CVSS score: 6.6, concerns a case of local privilege escalation that arises as a result of...

HPESBNW04970 rev.1 - HPE Aruba Networking 100 Series Cellular Bridge, Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 100 Series Access Points : Please refer to the Vulnerability Summary section for impacted versions. Affected Products HPE Aruba Networking 100 Series...

Malicious code in bitha-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2118a02700f11ae5ae19b93c46d65ab2fa2124bab75b22bbae41165b40a4dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fcea0af0c24ea1e12decf47c177d82558a2cb78c1feb025c58a00a07e87e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154037 Malicious code in cinta-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fcea0af0c24ea1e12decf47c177d82558a2cb78c1feb025c58a00a07e87e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990751 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit...

Malicious code in likely_fly_indigo-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174046672a2081952420f4047163df0f8bb00d2a46c5f056264f072d46a89e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74498

Malicious code in legitimatecoyotecopper-100 npm...

EUVD-2025-74416

Malicious code in numeroussmeltcopper-100 npm...

EUVD-2025-74570

Malicious code in homelessfelidaesalmon-100 npm...

Malicious code in numerous_smelt_copper-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5604d1d2e3c3490d8c42cf010bd6ac6259a5035b2307c3c574dcaa0476bcc453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111656 Malicious code in amazing_mackerel_pink-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d5da517bb26b55facc01da24d8b0943e522809bb7d4992807d3e2d734a9966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74489

Malicious code in likelyflyindigo-100 npm...

SICK AG TLOC100-100 安全漏洞

The SICK AG TLOC100-100 is a mobile robot positioning system from SICK Germany. A security vulnerability exists in the SICK AG TLOC100-100, which originates from a tampered C++ CLI client and could lead to a service crash during file transfers, affecting updates and availability...