92 matches found
Malicious code in elf-stats-midnight-saddlebag-720 (npm)
Source: amazon-inspector 738f7e12a3460319bb92fc9f4034834db18cc52dbabc5b7f1b94a8fc07fcf215 The package elf-stats-midnight-saddlebag-720 was found to contain malicious code. Source: ossf-package-analysis 17612f1c329b1c57903c3c5c973f504da6332745de6e1c61bca69954df9a7cb3 The OpenSSF Package Analysis...
Path traversal vulnerability in credentials-binding
credentials-binding 719.v80e905ef14eb and earlier does not sanitize file names for file and zip file credentials. This allows attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem. If Jenkins is configured to allow a low-privileged user to...
EUVD-2025-201019
Malicious code in elf-stats-midnight-saddlebag-720 npm...
EUVD-2023-27938
Malicious code in bioql PyPI...
EUVD-2023-53539
Malicious code in bioql PyPI...
EUVD-2023-27935
Malicious code in bioql PyPI...
EUVD-2025-25740
Malicious code in bioql PyPI...
CVE-2025-9387
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...
CVE-2025-9387
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...
CVE-2025-9387
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...
CVE-2025-9387 DCN DCME-720 Web Management Backend ip_block.php os command injection
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...
CVE-2025-9387 DCN DCME-720 Web Management Backend ip_block.php os command injection
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...
CVE-2025-9387: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...
DCN DCME-720 security vulnerabilities
DCN DCME-720 is a multi-core egress gateway from China Shenzhoukuntai DCN. A security vulnerability exists in DCN DCME-720 version 9.1.5.11, which originates from os command injection and could lead to remote attacks...
PT-2025-34563
Name of the Vulnerable Software and Affected Versions: DCN DCME-720 version 9.1.5.11 Description: A vulnerability exists in DCN DCME-720 version 9.1.5.11 related to OS command injection. The issue is located in the Web Management Backend component, specifically within the file...
CVE-2024-52781
DCME-320 =7.4.12.90, DCME-520 =9.25.5.11, DCME-320-L =9.3.5.26, and DCME-720 =9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php...
CVE-2024-52780
DCME-320 =7.4.12.90, DCME-520 =9.25.5.11, DCME-320-L =9.3.5.26, and DCME-720 =9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/mgmtedit.php...
CVE-2024-52779
DCME-320 =7.4.12.90, DCME-520 =9.25.5.11, DCME-320-L =9.3.5.26, and DCME-720 =9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/monstattop10.php...