1796 matches found
CVE-2026-73665
FreePBX UCP vulnerability affecting versions prior to 17.0.9. The UCP Node server (ports 8001/8003) uses io.use(checkAuth) but Socket.IO v4 applies that middleware only to the default namespace, allowing an unauthenticated client to reach custom namespaces. This can lead to crafted AMI actions th...
CVE-2026-46515
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERMREAD access was sufficient to call fmlistmanagers, fmlistpinsets, fmshowcontext, fmgetmcpconfig, fmbackupstatus, fmwhoscalling, fmrunsavedquery, and fmdiagnosetrunk, exposing AMI manager secrets, outbound dial PIN...
MAL-2026-6498 Malicious code in dttfdsdee (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae565bed85ec0db27f1ff658c7e9491591ce40edc56f423cd8b1122bc209c69c package.json declares a postinstall script that runs automatically on npm install. The script walks the entire filesystem with find to locate databas...
CVE-2023-25191
AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00...
CVE-2023-25192
AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00...
CVE-2021-31845
A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing carefully constructed Ami Pro .sam files onto a machine and having DLP Discover scan it, leading to...
EUVD-2025-134860
Malicious code in aiboloa-mioipe-ami npm...
Malicious code in kisut-afnig-ami (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a613ce089ffe69484a248e978643a1a0c5ac51e42748b488600817f14442d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134512
Malicious code in kisut-afnig-ami npm...
EUVD-2025-134489
Malicious code in kisut-afunig-ami npm...
MAL-2025-179662 Malicious code in kisut-afunig-ami (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50907a2a55fa6aeb4b170254d61ae978fde35aa219206746672043d44afc35f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134511
Malicious code in kisut-afnig-ami npm...
MAL-2025-179651 Malicious code in kisut-afnig-ami (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a613ce089ffe69484a248e978643a1a0c5ac51e42748b488600817f14442d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-134490
Malicious code in kisut-afunig-ami npm...
EUVD-2025-134861
Malicious code in aiboloa-mioipe-ami npm...
EUVD-2025-138756
Malicious code in poglymer-ognagh-ami npm...
AMI AptioV 安全漏洞
AMI AptioV is a firmware-related editor from AMI USA. A security vulnerability exists in AMI AptioV that stems from improperly restricted memory buffer manipulation, which could result in memory corruption and affect integrity and availability...
EUVD-2020-3842
Malware in sbrugna...