MiracleLinux 3 : xalan-j2-2.7.0-6jpp.2.0.1.AXS3 (AXSA:2014-250:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-250:01 advisory. Xalan is an XSLT processor for transforming XML documents into HTML, text, or other XML document types. It implements the W3C Recommendations for XSL...

Malicious code in elf-stats-snowdusted-cookiejar-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2480ce9c2a166238de101bac9cb648e0ba2a3b60bb4c0adef110d95d1a701797 The package elf-stats-snowdusted-cookiejar-250 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-200759

Malicious code in elf-stats-whimsical-snowflake-250 npm...

Malicious code in elf-stats-whimsical-snowflake-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32612e9bc1b7106587fec0bd0874c379147d662b77adee9afa38cadc90cc9289 The package elf-stats-whimsical-snowflake-250 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192193 Malicious code in elf-stats-whimsical-snowflake-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32612e9bc1b7106587fec0bd0874c379147d662b77adee9afa38cadc90cc9289 The package elf-stats-whimsical-snowflake-250 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192159 Malicious code in elf-stats-sprucey-snowman-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985dc0068af9fe29b65ed1a6bcd3ac544044ef5843f05a1149a1b5c87661c351 The package elf-stats-sprucey-snowman-250 was found to contain malicious code...

The vulnerability of the Setting Handler component in D-Link’s router microprogramming software for models DSR-150, DSR-150N, and DSR-250 allows a hacker to gain full access to these devices.

The vulnerability of the Setting Handler component in D-Link’s router microprogramming software, including the DSR-150, DSR-150N, and DSR-250 models, is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full acces...

EUVD-2020-18409

Malware in sbrugna...

EUVD-2018-11085

Malware in sbrugna...

EUVD-2023-49884

Malicious code in bioql PyPI...

CVE-2020-25759

An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests...

CVE-2020-18568

The D-Link DSR-250 3.14 DSR-1000N 2.11B201 UPnP service contains a command injection vulnerability, which can cause remote command execution...

CVE-2020-25758

An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root...

Exploit for Classic Buffer Overflow in Dlink Dsr-150_Firmware

CVE-2024-57376 Pre-auth remote code execution exploit for D-L...

CVE-2025-23180

CWE-250: Execution with Unnecessary Privileges...

CVE-2025-23181

CVE-2025-23181 affects Ribbon Communications Apollo 9608 SBC; root cause is an unnecessary privileged operation in v9.6R3, enabling Execution with Unnecessary Privileges. CVSS 3.1 base score 8.0 (HIGH) with Adjacent attack vector, Low attack complexity, Low privileges required, no user interactio...

CVE-2025-23181: Execution with Unnecessary Privileges

CWE-250: Execution with Unnecessary Privileges...

PT-2025-18188 · Ribbon Communications · Apollo 9608

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to execution with unnecessary privileges, as described by CWE-250. No additional details are provided about the nature of the issue, affected devices, or real-world...

CVE-2024-57376: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution...

D-Link多款产品 安全漏洞

The D-Link DSR-250N, among others, is a Unified Services Router from China-based AUO D-Link. A security vulnerability exists in various D-Link products. An attacker exploiting the vulnerability can remotely execute code. The following products are affected: DSR-150, DSR-150N, DSR-250, DSR-250N,...