6177 matches found
EUVD-2025-198804
A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...
PT-2025-47925
A firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability...
GL-Inet GL-AXT1800 安全漏洞
The GL-Inet GL-AXT1800 is a WiFi6 wireless router from GL-Inet China. A security vulnerability exists in the GL-Inet GL-AXT1800 version 4.7.0, which stems from a firmware downgrade vulnerability in the OTA update function that could lead to a man-in-the-middle attack...
Update your browser: Security fix for Chrome zero-day CVE-2025-13223
News, Security Update your browser: Security fix for Chrome zero-day CVE-2025-13223 Share November 20th, 2025 Hi everyone! The latest patches to Opera, Opera GX, Opera Air, and Opera for Android address several recent vulnerabilities, including a zero-day exploit CVE-2025-13223. We recommend...
EUVD-2025-177462
Malicious code in omicron-query-air-cold-kappa npm...
EUVD-2025-180488
Malicious code in air-easy-dog-float-interface npm...
Malicious code in air-epsilon-zeta-key-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3315bade14bc91e0c028f375cddafcc7a08630f221281feff53d52abe8355d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177627
Malicious code in new-alpha-transpile-air-resolve npm...
EUVD-2025-177409
Malicious code in orchestrate-grid-dog-air-route npm...
Malicious code in air-minify-load-secure-encode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in theta-validate-meta-air-cat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d3e186b062df4165b4ff6124f4467a91df506dc840e45e44a67191212c48ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178880
Malicious code in float-rain-finally-yaml-air npm...
EUVD-2025-180487
Malicious code in air-epsilon-zeta-key-bundle npm...
EUVD-2025-175961
Malicious code in theta-air-char-import-phi npm...
MAL-2025-189995 Malicious code in tree-psi-air-moon-air (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83074f704eb4e4519a481ac7f001147d60931915820fa8b068b512c76f180ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176236
Malicious code in stack-bundle-public-air-user npm...
EUVD-2025-175880
Malicious code in tree-psi-air-moon-air npm...
EUVD-2025-175957
Malicious code in thread-compile-parse-decrypt-air npm...