1350 matches found
MAL-2025-14656 Malicious code in apollo-nucleosynthesis-inflation-cassini (npm)
The package apollo-nucleosynthesis-inflation-cassini was found to contain malicious code...
MAL-2025-14658 Malicious code in apollo-spectron-cladistics-geochemistry (npm)
The package apollo-spectron-cladistics-geochemistry was found to contain malicious code...
⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More
Malware isn’t just trying to hide anymore—it’s trying to belong. We’re seeing code that talks like us, logs like us, even documents itself like a helpful teammate. Some threats now look more like developer tools than exploits. Others borrow trust from open-source platforms, or quietly build...
CVE-2025-53709
Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only installed on a small number of environments. Under specific circumstances, privileged users of secure-upload could have selected email templates not necessarily...
CVE-2025-5763
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...
Tenda CP3 注入漏洞
Tenda CP3 is a smart camera from Tenda, a Chinese company. A command injection vulnerability exists in Tenda CP3 version 11.10.00.2311090948, which stems from the failure of the function subF3C8C in the file apollo to correctly filter constructed command special characters, commands, and so on. A...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to the use of rigidly encrypted account data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform lies in the use of rigidly encrypted account data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to an uncontrolled element in the search process, allows a hacker to trigger a service failure.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to insufficient channel limitation for certain endpoints, allows a perpetrator to cause service interruptions.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform lies in the insufficient channel limitation for specified endpoints. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
PT-2025-24101 · Tenda · Tenda Cp3
Name of the Vulnerable Software and Affected Versions: Tenda CP3 version 11.10.00.2311090948 Description: A critical issue has been found, affecting the function sub F3C8C of the file apollo, leading to command injection. The attack can be launched remotely. Recommendations: For Tenda CP3 version...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to errors in privilege management, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to errors in privilege management, allows a perpetrator to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protected information...
CVE-2024-43397
Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed wit...
CVE-2024-25736
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /device/reboot GET request...
CVE-2024-25734
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts...
CVE-2024-25735
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request...
CVE-2024-32971
Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. The affected versions of Apollo Router contain a bug that in limited circumstances, could lead to unexpected operations being executed which can result in unintended data or...
CVE-2023-41317
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when GraphQL Subscriptions are...
CVE-2023-45812
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...