220 matches found
MAL-2025-14336 Malicious code in almond-zamia-4ryi (npm)
The package almond-zamia-4ryi was found to contain malicious code...
Malicious code in strawberry-almond-hqkl (npm)
The package strawberry-almond-hqkl was found to contain malicious code...
Malicious code in xenon-almond-mvqg (npm)
The package xenon-almond-mvqg was found to contain malicious code...
MAL-2025-20181 Malicious code in falcon-almond-8v6v (npm)
The package falcon-almond-8v6v was found to contain malicious code...
Malicious code in almond-sierra-rn4s (npm)
The package almond-sierra-rn4s was found to contain malicious code...
Malicious code in almond-nightingale-5bj8 (npm)
The package almond-nightingale-5bj8 was found to contain malicious code...
CVE-2009-3225
Multiple cross-site scripting XSS vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via 1 the page parameter in a browse action to index.php or 2 the addr parameter to...
CVE-2005-3741
Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions...
Bitter APT Hackers Continue to Target Bangladesh Military Entities
Military entities located in Bangladesh continue to be at the receiving end of sustained cyberattacks by an advanced persistent threat tracked as Bitter. "Through malicious document files and intermediate malware stages the threat actors conduct espionage by deploying Remote Access Trojans,"...
Securifi Almond Buffer Overflow Vulnerability
The Securifi Almond is a wireless router with a touch screen. A buffer overflow vulnerability exists in routerSummary in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to cause a buffer overflow or heap overflow...
Securifi Almond Cross-Site Scripting Vulnerability
The Securifi Almond is a wireless router with a touch screen. A cross-site scripting vulnerability in the Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096 can be exploited by a remote attacker to take control of the device as the admin user, execute arbitrary code, or chan...
Securifi Almond Server-Side Request Forgery Vulnerability
The Securifi Almond is a wireless router with a touch screen. A server-side request forgery vulnerability exists in the Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by a remote attacker to trick a user into changing a user password...
Securifi Almond Command Injection Vulnerability
The Securifi Almond is a wireless router with a touch screen. A command injection vulnerability exists in the Add Routing feature in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to submit a malicious payload and take control of th...
Securifi Almond Command Injection Vulnerability (CNVD-2019-18745)
The Securifi Almond is a wireless router with a touch screen. A command injection vulnerability exists in the port forwarding feature in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to submit a malicious payload and take control o...
Securifi Almond buffer overflow vulnerability (CNVD-2019-18743)
The Securifi Almond is a wireless router with a touch screen. A buffer overflow vulnerability exists in getCfgToHTML in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to cause a buffer overflow or heap overflow...
Securifi Almond Cross-Site Scripting Vulnerability (CNVD-2019-18748)
The Securifi Almond is a wireless router with a touch screen. A cross-site scripting vulnerability in the Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which stems from the program's failure to implement an arbitrary cross-site scripting protection mechanism, can be...
CVE-2017-8328
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery...
CVE-2017-8330
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a UPnP functionality for devices to interface with the router and interact with the device. It seems that the "NewInMessage" SOAP parameter passed with a huge payload results in...
CVE-2017-8337
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of executing various actions on the web management interface. It seems that the device does not implement any Origin header check which allows an...
CVE-2017-8328
An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross site request forgery...