CVE-2026-16741 OS Command in TR7 Cyber ​​Defense's TR7 ASP

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 befor...

CVE-2026-16741

The TR7 ASP software by TR7 Cyber Defense Inc. is vulnerable to an OS Command Injection flaw due to the improper neutralization of special elements used in an OS command. This vulnerability affects the virtual appliance and physical appliance versions. Specifically, the affected versions include ...

PT-2026-114190

Name of the Vulnerable Software and Affected Versions TR7 ASP versions 1.0.40.236 through 1.0.1554.2330 TR7 ASP versions 1.6.42.239 through 1.6.1554.2330 Description Missing authentication for a critical function in TR7 Cyber Defense Inc. TR7 ASP on both virtual and physical appliances allows for...

PT-2026-114191

Name of the Vulnerable Software and Affected Versions TR7 ASP versions 1.0.40.236 through 1.0.1554.2330 TR7 ASP versions 1.6.42.239 through 1.6.1554.2330 Description An OS command injection flaw exists in TR7 Cyber Defense Inc. TR7 ASP on both virtual and physical appliances. This issue occurs du...

CVE-2026-16741: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 befor...

CVE-2026-16740: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239...

TR7 Cyber Defense TR7 ASP Command Injection Vulnerability

Versions of TR7 Cyber Defense TR7 ASP from 1.0.40.236 to 1.0.1554.2331 and from 1.6.42.239 to 1.6.1554.2331 have a command injection vulnerability. This vulnerability stems from improper handling of special elements used in operating system commands, which may lead to command injection attacks...

TR7 Cyber Defense TR7 ASP Authorization Issue Vulnerability

Versions of TR7 CyberDefense TR7 ASP from 1.0.40.236 to 1.0.1554.2331 and from 1.6.42.239 to 1.6.1554.2331 contain authorization issue vulnerabilities. These vulnerabilities stem from the lack of authentication for critical functions, which may lead to OS command injection...

CLEANSTART-2025-XJ39887 ASP

CVE-2023-36558 affects multiple packages. ASP. See references for individual vulnerability details...

CLEANSTART-2025-GD87360 ASP

CVE-2023-35391 affects multiple packages. ASP. See references for individual vulnerability details...

CLEANSTART-2025-KP84277 ASP

CVE-2023-33170 affects multiple packages. ASP. See references for individual vulnerability details...

CVE-2026-98051

A flaw was found in the Linux kernel's Broadcom ASP 2.0 Ethernet driver. When evaluating whether sufficient transmit buffer space is available for outgoing packets, the driver fails to properly verify all required consecutive descriptor slots. A local user could exploit this flaw by generating...

PT-2026-99926

Name of the Vulnerable Software and Affected Versions D-Link DI-8400 version 16.07 Description A flaw in the Web Administration Service allows for a remote stack-based buffer overflow. This occurs when the opt argument is manipulated within the menu nat more asp function of the menu nat more.asp...

attack-surface

ASP — Public Network Attack Surface Automation Mapping and Vul...

Malicious code in illegal-sapphire-asp (npm)

Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in grateful-fuchsia-asp (npm)

Source: amazon-inspector e81ffe42999a0a485ef53ca5bcac48b228f3df2d4a808156032e2a460b1e485d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in excited-red-asp (npm)

Source: amazon-inspector 9f763e235e5d74ea18d2c972f733fac308177b2c699000271246212d4324f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in entire-indigo-asp (npm)

Source: amazon-inspector 8fbad540e1df3506493ebd29e2d6f7a2597f5b18a703b371ab2821d0681e6a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in critical-blush-asp (npm)

Source: amazon-inspector d6c6548cbc44347102c96058b1f1e8f44b997c1fb933cfa099da75e203569d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

CVE-2019-25765

ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...