CVE-2021-4470

TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to...

CVE-2021-4470 TG8 Firewall Unauthenticated RCE via runphpcmd.php

TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to...

CVE-2021-4470 TG8 Firewall Unauthenticated RCE via runphpcmd.php

TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to...

Malicious code in chai-test-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f220c85ce9af5bc025f22e269aaaf3af1c5853df736bcbb97331229c06b1c32 The package chai-test-async was found to contain malicious code. Source: ghsa-malware 5b8f7387cfa3c737fbb688f651f56f2174c2e831df5ded826ec25d8b7dab1bc...

PT-2025-47021

Name of the Vulnerable Software and Affected Versions TG8 Firewall affected versions not specified Description The software contains a pre-authentication remote code execution issue in the runphpcmd.php endpoint. The syscmd POST parameter is directly passed to a system command without validation...

Ubee EVW3226 安全漏洞

The Ubee EVW3226 is a WiFi router from Ubee Corporation of Taiwan, China. A security vulnerability exists in the Ubee EVW3226 version 1.0.20 and earlier, which stems from a configuration backup file being stored in the web root directory and unencrypted, which could lead to the disclosure of...

Malicious code in @walletify/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf24003a1ce3e60950dc6d7029b916a3794e42fd751e4370d5241a1cef53ba81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-aerowind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924018214a3e9174dce76b34435456874d9e4e59b88a5d0e469af8af45d6812c The package tailwindcss-aerowind was found to contain malicious code. Source: ghsa-malware...

Malicious code in monobing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441b7951912d3fb98c9e3b96bbb2d93b7a99c024e860f3424d3f09befcb1c3c9 The package monobing was found to contain malicious code. Source: ghsa-malware 387a8c28d992f25a42764f6d247a0c1c0a70119f99f570f157549646628995e6 Any...

Lexmark Printers Improper Input Validation (CVE-2022-29850)

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Malicious code in wdk-pricing-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93fe5d1e216edcbf2fbabc1a210e2d2265a37dc038caa8477fee167dfd2f6b0 The package wdk-pricing-provider was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49327 Malicious code in orderly-network-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec35c18a8349d3d2dd52575ffa769fa141be9d1c7b99b0a3e95d994af6acb495 The package orderly-network-config was found to contain malicious code. Source: ghsa-malware...

ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability

The Australian Signals Directorate ASD has issued a bulletin about ongoing cyber attacks targeting unpatched Cisco IOS XE devices in the country with a previously undocumented implant known as BADCANDY. The activity, per the intelligence agency, involves the exploitation of CVE-2023-20198 CVSS...

Malicious code in cursor-ai-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cbd361c113d7d9176c54442b50ef54297ec337dc805f6ec21d0e275b187d05 The package cursor-ai-fork was found to contain malicious code. Source: ghsa-malware 77f90740d80a74fd38f9815f98257a414e78aa314b00b1a75f4d56352d972811...

MAL-2025-49263 Malicious code in pixelblm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d62ab0b93a24a50d76861d245aca1b9d067170b8dc681e470fa1c003f2eed10 The package pixelblm was found to contain malicious code. Source: ghsa-malware 2ee65b21f5be8ce779e9dcc8e25883cf38d8856e9c2938e1e9949ad4ea50c111 Any...

MAL-2025-49073 Malicious code in xo-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e05e0bfe7b552fd008c4ad64a4d0f2d0a842f898eb7ab753451781236101acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49031 Malicious code in powerbi-visuals-sunburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707c0139d214cc2c615245cb618d8e272c7868e912755bc359aaadb5415b1273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @msdyn365-commerce-marketplace/tax-registration-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71449dcdb918b9b8c54b5420fd4cd57a99e84a172a53b0725bb39e1f6591b7bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @apache-netbeans/netbeans-antora-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64c5548a67ff295a5fef8341e288347ac54fd9677bfd0be6e0752cc670888f37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48978 Malicious code in airbnb-bev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e11166dde82656e7792ef9096c5b2720b2ead7d9209c71dbf8a8a07dcbbda249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...