1035 matches found
Malicious code in riana-nasipecel51-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9e4709dff7751454c29be684cbca10ed083abe14ee7ebc0c63184259318fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-53055 Malicious code in joni-martabak89-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de80467aea2614210a7bd94bbe710e5743f43f54c67b768c954194bb34981e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-61956 Missing Authentication for Critical Function in Radiometrics VizAir
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...
EUVD-2025-37762
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...
CVE-2025-61956: Missing Authentication for Critical Function
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...
EUVD-2025-37400
ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow...
CVE-2025-34284
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...
CVE-2025-34284 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin
Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...
CVE-2025-7330: Cross-Site Request Forgery (CSRF)
A cross-site request forgery security issue exists in the product and version listed. The vulnerability stems from missing CSRF checks on the impacted form. This allows for unintended configuration modification if an attacker can convince a logged in admin to visit a crafted link...
CVE-2025-59957 Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor
An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...
EUVD-2020-24863
Malware in sbrugna...
EUVD-2017-0661
Malware in sbrugna...
EUVD-2004-2118
Malware in sbrugna...
EUVD-2005-2914
Malware in sbrugna...
EUVD-2001-0480
Malware in sbrugna...
EUVD-2014-0110
Malware in sbrugna...
EUVD-2019-3550
Malware in sbrugna...
EUVD-2004-1769
Malware in sbrugna...