MAL-2025-192927 Malicious code in adril7123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c158e65a09b5e455b852acb29ec1b107df59e30a6b3760fdbf3272532b64d2 The package adril7123 was found to contain malicious code. Source: ghsa-malware 94f91e9ba95b42dff0bf2cb7a9885e66ce64b1ff324967c5ed24203322917e15 Any...

MAL-2025-192663 Malicious code in ahmed_salem_o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccf3722bcf6828ca9cc9ed0f332cb3778d8a8be73146f96edb1d381a4649f54 The package ahmedsalemo was found to contain malicious code. Source: ghsa-malware dcde03f9a78b367c9044b92cfac2900e588491df6c7894a65c4b2658e26c7e65 An...

MAL-2025-192667 Malicious code in ctfvampir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7326c736b63690c5699af7e755bf0f5fa0663dcfc80c27ae252c7f8b9d57c47 The package ctfvampir was found to contain malicious code. Source: ghsa-malware 20527b160a7dde628dd4ce3ca417fd8a0977612133c8b1a443cdbe9496efb604 Any...

MAL-2025-192654 Malicious code in viktorparserctf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e1243238b2a1eade50d8bcfebe117fd9f3090271497fce1f9d1e2798abeaa4 The package viktorparserctf8 was found to contain malicious code. Source: ghsa-malware 610271459dc452bb1384a92a84e0e37bd11f3d688166faa2ee174e81fdaf8a...

MAL-2025-192625 Malicious code in cursorparserfruit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a22e5c321410a329554b1e1f84c5e7971d06bdded434ec145eef741401151f The package cursorparserfruit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192633 Malicious code in hubstyletokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270a762e8fe2aca75314b8b673b01068f64424cb56d5442954e0c44119475dff The package hubstyletokens was found to contain malicious code. Source: ghsa-malware b315d930157f2b1fd1b14cddfbd3f09759c6b275da5b51570eadff87cadf27b8...

MAL-2025-192644 Malicious code in usage-tracker-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8998ae7ec51b23bfdefe724e7c4bc34ad623362708f171a1c3ffcf4e98be15e0 The package usage-tracker-janus was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192627 Malicious code in elf-stats-sugarplum-fir-770 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9b8e626ecf42f5770535353dad46da3dbae1b468a54040b1024c069ead0f72 The package elf-stats-sugarplum-fir-770 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-nutmeg-sleigh-350 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e43446814eeb05f58979f02ff96534374a9f069055bcc5f5f97425254b0817 The package elf-stats-nutmeg-sleigh-350 was found to contain malicious code. Source: ghsa-malware...

Malicious code in shopify-monorail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef2f1cf1e314cd9c5336d39ab49f2906fba52d48adadeed13adb5cf4104aa6d The package shopify-monorail was found to contain malicious code. Source: ghsa-malware fedb52b0658528a4cece77bf4ef96fff3b11449dbd45c44084d4308b1e4e3f...

CVE-2025-41732

An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkcookie function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...

CVE-2025-41730

An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkaccount function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...

CVE-2025-41732

An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkcookie function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...

CVE-2025-41730

An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkaccount function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...

CVE-2025-41730

An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkaccount function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...

CVE-2025-41732

CVE-2025-41732 describes a stack-based overflow caused by unsafe sscanf usage in the check_cookie() function, permitting an unauthenticated remote attacker to write into fixed-size stack buffers and potentially compromise the device. The Open documentation consistently states a full device compro...

CVE-2025-41732 Stack-based buffer overflow via unsafe sscanf in check_cookie()

An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkcookie function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...

EUVD-2025-202415

An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkaccount function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...

CVE-2025-41730

CVE-2025-41730 is an unauthenticated remote exploit reported for WAGO Industrial-Managed-Switches and related Red Hat/NVD variants. The root cause is unsafe uses of sscanf in the check_account() function, which can write data into fixed-size stack buffers, resulting in a stack-based overflow and ...

CVE-2025-41730 Stack-based buffer overflow via unsafe sscanf in check_account()

An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkaccount function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...