MAL-2025-60247 Malicious code in defeated_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65857ae5d3a3bb58d9d7732ec485eef439850492331726701bd93ea283cf9af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47814

Malicious code in excessbatz3n npm...

EUVD-2025-48012

Malicious code in economicbatz3n npm...

PT-2025-46160

Name of the Vulnerable Software and Affected Versions Triofox versions prior to 16.7.10368.56560 Description Triofox is vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete. This vulnerability, designated CVE-2025-12480, allows...

EUVD-2021-1810

Malware in sbrugna...

EUVD-2001-0395

Malware in sbrugna...

EUVD-2001-0662

Malware in sbrugna...

EUVD-2006-0637

Malware in sbrugna...

EUVD-2002-0335

Malware in sbrugna...

EUVD-2001-0661

Malware in sbrugna...

EUVD-2006-0922

Malware in sbrugna...

EUVD-2019-17844

Malware in sbrugna...

CVE-2025-57516

CVE-2025-57516: OS command injection in PublicCMS versions 5.202506.a and 5.202506.b. The vulnerability arises from processing crafted DATABASE, USERNAME, or PASSWORD variables passed to backupDB.bat, enabling arbitrary command execution. Affected documentation from multiple sources confirms the ...

CVE-2025-57516

OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file...

MAL-2025-45469 Malicious code in opportunity-pain-bat (npm)

The package opportunity-pain-bat was found to contain malicious code...

Malicious code in opportunity-pain-bat (npm)

The package opportunity-pain-bat was found to contain malicious code...

CVE-2022-40282

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is...

CVE-2021-36753

sharkdp BAT before 0.18.2 executes less.exe from the current working directory...

CVE-2019-8454

A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the syste...

RDPGuard 9.9.9 - Privilege Escalation

Exploit Title: RDPGuard 9.9.9 - Privilege Escalation Discovered by: Ahmet Ümit BAYRAM Discovered Date: 09.05.2025 Vendor Homepage: https://rdpguard.com Software Link: https://rdpguard.com/download.aspx Tested Version: 9.9.9 latest Tested on: Windows 10 32bit Steps to Reproduce 1. Prepare a .bat...