Malicious code in xenon-almond-mvqg (npm)

The package xenon-almond-mvqg was found to contain malicious code...

Malicious code in almond-nightingale-5bj8 (npm)

The package almond-nightingale-5bj8 was found to contain malicious code...

MAL-2025-14333 Malicious code in almond-nightingale-5bj8 (npm)

The package almond-nightingale-5bj8 was found to contain malicious code...

MAL-2025-22891 Malicious code in iceberg-almond-jx84 (npm)

The package iceberg-almond-jx84 was found to contain malicious code...

MAL-2025-14335 Malicious code in almond-sierra-rn4s (npm)

The package almond-sierra-rn4s was found to contain malicious code...

CVE-2009-3225

Multiple cross-site scripting XSS vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via 1 the page parameter in a browse action to index.php or 2 the addr parameter to...

CVE-2005-3741

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions...

Bitter APT Hackers Continue to Target Bangladesh Military Entities

Military entities located in Bangladesh continue to be at the receiving end of sustained cyberattacks by an advanced persistent threat tracked as Bitter. "Through malicious document files and intermediate malware stages the threat actors conduct espionage by deploying Remote Access Trojans,"...

Securifi Almond Buffer Overflow Vulnerability

The Securifi Almond is a wireless router with a touch screen. A buffer overflow vulnerability exists in routerSummary in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Securifi Almond Server-Side Request Forgery Vulnerability

The Securifi Almond is a wireless router with a touch screen. A server-side request forgery vulnerability exists in the Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by a remote attacker to trick a user into changing a user password...

Securifi Almond Cross-Site Scripting Vulnerability (CNVD-2019-18748)

The Securifi Almond is a wireless router with a touch screen. A cross-site scripting vulnerability in the Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which stems from the program's failure to implement an arbitrary cross-site scripting protection mechanism, can be...

Securifi Almond Command Injection Vulnerability

The Securifi Almond is a wireless router with a touch screen. A command injection vulnerability exists in the Add Routing feature in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to submit a malicious payload and take control of th...

Securifi Almond Cross-Site Scripting Vulnerability

The Securifi Almond is a wireless router with a touch screen. A cross-site scripting vulnerability in the Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096 can be exploited by a remote attacker to take control of the device as the admin user, execute arbitrary code, or chan...

Securifi Almond buffer overflow vulnerability (CNVD-2019-18743)

The Securifi Almond is a wireless router with a touch screen. A buffer overflow vulnerability exists in getCfgToHTML in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

Securifi Almond Command Injection Vulnerability (CNVD-2019-18745)

The Securifi Almond is a wireless router with a touch screen. A command injection vulnerability exists in the port forwarding feature in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to submit a malicious payload and take control o...

CVE-2017-8330

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a UPnP functionality for devices to interface with the router and interact with the device. It seems that the "NewInMessage" SOAP parameter passed with a huge payload results in...

CVE-2017-8332

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking key words passing in the web traffic to prevent kids from watching content that might be deemed unsafe using the web management interface...

CVE-2017-8334

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...

CVE-2017-8330

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a UPnP functionality for devices to interface with the router and interact with the device. It seems that the "NewInMessage" SOAP parameter passed with a huge payload results in...

CVE-2017-8332

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking key words passing in the web traffic to prevent kids from watching content that might be deemed unsafe using the web management interface...