The vulnerability of function sub_4455BC in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4455BC in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

PUB-A-430029957

In convertHalTDToRil of commands.cpp, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-66294: Improper Control of Generation of Code

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection SSTI vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by...

Malicious code in 7715-permissions-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62836f3e2abcaa4bf3bcda16aa07d57b7f0a97ffcd7d65d3ba155bfd17f8cd8c The package 7715-permissions-shared was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191493 Malicious code in 7715-permissions-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62836f3e2abcaa4bf3bcda16aa07d57b7f0a97ffcd7d65d3ba155bfd17f8cd8c The package 7715-permissions-shared was found to contain malicious code. Source: ghsa-malware...

Malicious code in umap-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fe0d08b117ec6e7dcd48b13025326c2f427f3251c624867c9f0d398bd2dab8 The package umap-wasm was found to contain malicious code. Source: ghsa-malware a8b9419bdb44fab11a3bade4b4831308972f0fc3acfd3472c362fe672339e8ab Any...

MAL-2025-191492 Malicious code in umap-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fe0d08b117ec6e7dcd48b13025326c2f427f3251c624867c9f0d398bd2dab8 The package umap-wasm was found to contain malicious code. Source: ghsa-malware a8b9419bdb44fab11a3bade4b4831308972f0fc3acfd3472c362fe672339e8ab Any...

Malicious code in babel-plugin-standalone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4d55e36c2dc9ae1b9f1be19b7df14b24b6911fd72498d6d336565a94cea59f The package babel-plugin-standalone was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191491 Malicious code in babel-plugin-standalone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b4d55e36c2dc9ae1b9f1be19b7df14b24b6911fd72498d6d336565a94cea59f The package babel-plugin-standalone was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191494 Malicious code in wds-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827b1d3e49cfad3ca5aa4eeb1a7afedc234ed734e13948ba28b0e3b3b71180cc The package wds-icons was found to contain malicious code. Source: ghsa-malware 24d19b105cd9931a78806b2c2f9a30d8ef982b16e1ed4620c185a75dbbbf610d Any...

MAL-2025-191490 Malicious code in com.unity.sharp-zip-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedde339d72e05699d5f33d7c16779f926f419baded72d7cd78d2610395cc807 The package com.unity.sharp-zip-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in liblynxtextra.so (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f3e98410431dc81bb4dab16130bd1e591d2f8cce684db9fb654132ce96e5fe The package liblynxtextra.so was found to contain malicious code. Source: ghsa-malware b505f2aa1ba3b64eb6dbe55e16172a887bc2b61007ef602d5bce8ce2d1ab28...

MAL-2025-191489 Malicious code in liblynxtextra.so (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f3e98410431dc81bb4dab16130bd1e591d2f8cce684db9fb654132ce96e5fe The package liblynxtextra.so was found to contain malicious code. Source: ghsa-malware b505f2aa1ba3b64eb6dbe55e16172a887bc2b61007ef602d5bce8ce2d1ab28...

MAL-2025-191488 Malicious code in eslint-plugin-react-hooks-published (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647dedd2c8ea8a9cef54b85666b74459095d17369da310d54a0c1960f87dafe6 The package eslint-plugin-react-hooks-published was found to contain malicious code. Source: ghsa-malware...

Malicious code in chain-selectors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7c7965dde4649d4adda7307f395134f22ed654c9a20b2c7dc9ea1b0c1dad9 The package chain-selectors was found to contain malicious code. Source: ghsa-malware 5632dc92ff1221e72c077781c43c1482a1a40fd5c703f95dd209890a4aa7941...

MAL-2025-191487 Malicious code in chain-selectors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7c7965dde4649d4adda7307f395134f22ed654c9a20b2c7dc9ea1b0c1dad9 The package chain-selectors was found to contain malicious code. Source: ghsa-malware 5632dc92ff1221e72c077781c43c1482a1a40fd5c703f95dd209890a4aa7941...

Malicious code in vitest-environment-jsdom-patched (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0d8ae07807d73026bd13988c3341aecf8375b53ae436d03f80110884c5d84e The package vitest-environment-jsdom-patched was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191485 Malicious code in x402-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b562070e10c7c2cf1ae07233d0e676a9c3808a2425407b709e9d03ab981f8 The package x402-legacy was found to contain malicious code. Source: ghsa-malware e93ea6b10273adfc3bd24ad98240fa9d023af96eb7a7c4a5a2073e881140808f An...

Malicious code in x402-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37b562070e10c7c2cf1ae07233d0e676a9c3808a2425407b709e9d03ab981f8 The package x402-legacy was found to contain malicious code. Source: ghsa-malware e93ea6b10273adfc3bd24ad98240fa9d023af96eb7a7c4a5a2073e881140808f An...

CVE-2025-62354

Improper neutralization of special elements used in an OS command 'command injection' in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution...