MAL-2025-48569 Malicious code in mender-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7de3cf7258b50c3fd2233ed366fed6714e44da530255103d045c71406b2ea081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48535 Malicious code in park-boost-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa4995e481e7e195eba9f71a64e7cfddf3fbcb8004d9eda6edb78c022875441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-6950

An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens JWT used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid...

CVE-2025-6950

An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens JWT used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid...

CVE-2025-6950

An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens JWT used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid...

CVE-2025-6950

An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens JWT used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid...

CVE-2025-6950

CVE-2025-6950 affects Moxa network security appliances and routers. The flaw is use of a hard-coded key to sign JWTs, enabling an unauthenticated attacker to forge tokens and impersonate any user, leading to complete compromise of the affected device (confidentiality, integrity, availability). Th...

Malicious code in ynab_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89651853affef6883ac4048c42b47d47b023d454db86fecabcd3b8ec15f1c0f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-20204

DBLTek GoIP devices models GoIP 1, 4, 8, 16, and 32 contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumented user via a proprietary challenge–response scheme which is fundamentally flawed. Because the challenge response ca...

CVE-2023-7311 BYTEVALUE Intelligent Flow Control Router Command Injection

BYTEVALUE Intelligent Flow Control Router contains a command injection vulnerability via the /goform/webRead/open endpoint. The path parameter is not properly validated and is echoed into a shell context, allowing an attacker to inject and execute arbitrary shell commands on the device. Successfu...

CVE-2023-7311 BYTEVALUE Intelligent Flow Control Router Command Injection

BYTEVALUE Intelligent Flow Control Router contains a command injection vulnerability via the /goform/webRead/open endpoint. The path parameter is not properly validated and is echoed into a shell context, allowing an attacker to inject and execute arbitrary shell commands on the device. Successfu...

MAL-2025-48400 Malicious code in graphorbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e39cb6a782c7394e47a516577dd7696fc2db73d710cdd07e5ceec3dbc46c7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48348 Malicious code in simple-scr-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 833779f4455bdaf68dd142867b4cb379df156642ed6b531836d613bc4f591ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-tediter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb4dfd10d5fb2961d7f32f3aa273844ef4a62f7eb9dc971e9213d5babb3e0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-js-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6662e6d5b878c4eb877089ca5baf3bd40947a9e14dc394e9f11e935facea5b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48279 Malicious code in frontend-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd81764709c7d0f5174dd0a979519b3c85894302b3df75acedbf1de8500d3c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-iocz0a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad74b3db117b60fc0bbc25bfe553def04f2261766313c4b245c4c88c657d1573 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48122 Malicious code in redirect-4r6ynv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41a7d6bfb0fbcf3836300c4c231865a31c603616b44b878f4a7a908af4183e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-1st7z7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 638828fbe37e3987211d30f184858e313c2d97580599b67ec562cd00ce90d942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-5iqds5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f36f3079f5a6efbec38e19190069056d7769ce95a36553812dd4283d624f09a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...