309 matches found
Exploit for CVE-2026-35333
CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth...
SUSE CVE-2026-25075
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
CVE-2026-25075
A flaw was found in strongSwan. An unauthenticated remote attacker can exploit an integer underflow vulnerability in the EAP-TTLS AVP Attribute-Value Pair parser. By sending specially crafted AVP data with invalid length fields during IKEv2 Internet Key Exchange version 2 authentication, the...
AZL-80300 CVE-2026-25075 affecting package strongswan for versions less than 5.9.14-9
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
UBUNTU-CVE-2026-25075
strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authentication. Attackers can exploit the...
EUVD-2025-176019
Malicious code in telesto-publish-oberon-charon npm...
EUVD-2025-179750
Malicious code in charon-transhumanism-zephyr-electron-builder npm...
EUVD-2025-179940
Malicious code in bunyan-areology-glaciology-charon npm...
EUVD-2025-175943
Malicious code in thuban-charon-uninstall-nextjs npm...
EUVD-2025-179729
Malicious code in cladistics-charon-sagitta-protractor npm...
EUVD-2025-176339
Malicious code in slidev-odin-charon-pino-pretty npm...
EUVD-2025-178532
Malicious code in hexo-boson-charon-framework npm...
Malicious code in slidev-odin-charon-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a6f20651e71b9191c950fc2cbdba6720c98b9935f61ba97cc07e440604538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186131 Malicious code in charon-stream-fornax-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4cf23b8f66359c49b529a6491ed2854491a148dd0446c95f06774ae3374ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185468 Malicious code in antares-jsonp-charon-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4d80577e0db7da7c6c0f0734eee7b372d1ea0a1894b44188cf2593f584973c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187474 Malicious code in init-charon-terser-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3508eca342f082f4e63f5a94b88316894ac60ba0b8e0ac588455e64488807bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179525
Malicious code in cosmos-centaurus-charon-tool npm...
EUVD-2025-179740
Malicious code in child-process-charon-mui-on npm...
Malicious code in antares-jsonp-charon-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4d80577e0db7da7c6c0f0734eee7b372d1ea0a1894b44188cf2593f584973c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...