Malicious code in wfui-dbd-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49a931af71a32dfa7644c29cca564d41bd857fa8cdea4956e0764cd224834ad The package wfui-dbd-react-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in wfui-dsm-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab7eb463079033f35833ad6226f3db96e8b3e17ed382e0868d2ad823af5bb34 The package wfui-dsm-react-ui was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191669 Malicious code in wfui-dsm-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab7eb463079033f35833ad6226f3db96e8b3e17ed382e0868d2ad823af5bb34 The package wfui-dsm-react-ui was found to contain malicious code. Source: ghsa-malware...

USN-7903-1: Django vulnerabilities

It was discovered that Django incorrectly handled certain characters in the FilteredRelation object. An attacker could possibly use this issue to execute arbitrary SQL commands. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04, and Ubuntu 25.10...

CVE-2025-54515

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appear they were...

Malicious code in hooktest3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d1104ab742749c40acd3c4c989dba15890db64fd22f688dea72727fbc5b9d23 During installation, the package starts a code to retrieve and execute commands from Discord --- Category: MALICIOUS - The campaign has clearly malicious inten...

MAL-2025-191761 Malicious code in hooktest3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d1104ab742749c40acd3c4c989dba15890db64fd22f688dea72727fbc5b9d23 During installation, the package starts a code to retrieve and execute commands from Discord --- Category: MALICIOUS - The campaign has clearly malicious inten...

Malicious code in wfui-test-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560542e2d2fa22d83add8cd46675e252d841fe3b08edfd847677a98547e86a7 The package wfui-test-e2e was found to contain malicious code. Source: ghsa-malware 3440ad1d2e090dbea33cc7a6b8e4cda047b6e20b31fc8bbd3d9e13b1f1758c56...

MAL-2025-191545 Malicious code in wfui-test-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560542e2d2fa22d83add8cd46675e252d841fe3b08edfd847677a98547e86a7 The package wfui-test-e2e was found to contain malicious code. Source: ghsa-malware 3440ad1d2e090dbea33cc7a6b8e4cda047b6e20b31fc8bbd3d9e13b1f1758c56...

CVE-2025-11786: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'SetUserPassword' function, the 'newPassword' parameter is directly embedded in a shell command string using 'sprintf' without any sanitisation or validation, and then executed using 'system'. This allows a...

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-65896: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys...

CVE-2025-65896

SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys...

PT-2025-54849

SQL injection vulnerability in long2ice asyncmy thru 0.2.11 allows attackers to execute arbitrary SQL commands via crafted dict keys...

EUVD-2024-55105

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

Malicious code in hl-naduccio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7193ea32e3d2686d1c8a3d6a7f78a78a41f3d8cf1441595f7a323029b4b9ac7 The package hl-naduccio was found to contain malicious code. Source: ghsa-malware cbf2d782795965491bb5f2dbaa4d5cf378b7ccfd4b370b90cb7059b01b2685ab An...

MAL-2025-191538 Malicious code in hl-naduccio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7193ea32e3d2686d1c8a3d6a7f78a78a41f3d8cf1441595f7a323029b4b9ac7 The package hl-naduccio was found to contain malicious code. Source: ghsa-malware cbf2d782795965491bb5f2dbaa4d5cf378b7ccfd4b370b90cb7059b01b2685ab An...

kernel: Bluetooth: MGMT: Fix possible UAFs

A flaw was found in the Linux kernel’s Bluetooth management subsystem net/bluetooth/mgmt.c. The mgmtpending structure may be freed while still being processed, or remain on the pending command list, which allows a use-after-free or double-free scenario. An attacker with local access to the system...

Exploit for OS Command Injection in Xstream

CVE-2020-26217 XStream RCE Exploit XStream remote code execut...

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...