3332 matches found
Malicious code in wawan-martabak85-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118edec8998cecd93eca3cccf8e8d51bee3b5a0f355a2395e6c4ff48d69a683d The package wawan-martabak85-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
MAL-2025-50465 Malicious code in galih-rujaksoto43-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4625f22eee97dedc13da58c41c6baca369fcdfa5311d190e88f9758b8fc8abb The package galih-rujaksoto43-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
MAL-2025-50007 Malicious code in candra-moci3-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c902722cc2ef5be6e444710c159e8c85f77c5d898dce253a4eb463bbe461ee The package candra-moci3-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
MAL-2025-51851 Malicious code in fauzi-gaplek13-kyuki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fda69de69d6fac0c3177fd8e6e42d5b805251bd4eb36416eb8f255407934422 The package fauzi-gaplek13-kyuki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
MAL-2025-50584 Malicious code in udin-peyek62-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b57e4c2cd0fb1e220b68981e4b0172b84d3d3de2192f6ea95145a565a918a3 The package udin-peyek62-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
MAL-2025-51496 Malicious code in dewanto-peyek10-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db61868488138a2d3c8e383926b6307b4bf2fcd1b3e843e955abeadf0dd9dc60 The package dewanto-peyek10-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in vida-kue30-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a653640108d823fb5b79d3edbe710cfae6ebb0cbdc3f18c600c69b0aee3ec9a8 The package vida-kue30-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...
Malicious code in andi-gorengan98-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27171cdb5b2a0764d27c05657adffe177b18d44199c060d60693b067a4e4819 The package andi-gorengan98-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
Malicious code in eko-rangginang89-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1fee5c01df6b3030e6658d1747f6fba0b1fc4956157532c9c30a16605da7e The package eko-rangginang89-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...
CVE-2025-64346
archives is a Go library for extracting archives tar, zip, etc.. Version 1.0.0 does not prevent a malicious user to feed a specially crafted archive to the library causing RCE, modification of files or other malignancies in the context of whatever the user is running this library as, through the...
Archives path traversal vulnerability
archives is a cross-platform, multi-format Go library from the French personal developer Matt Holt. A path traversal vulnerability exists in archives version 1.0.0, which stems from a lack of effective protection for specially crafted zip archives and could lead to remote code execution or file...
PT-2025-45412
Name of the Vulnerable Software and Affected Versions archives version 1.0.0 Description archives is a Go library used for extracting archives such as tar and zip files. Version 1.0.0 does not adequately prevent a malicious user from providing a specially crafted archive that could lead to Remote...
CVE-2025-64346: Improper Limitation of a Pathname to a Restricted Directory
archives is a Go library for extracting archives tar, zip, etc.. Version 1.0.0 does not prevent a malicious user to feed a specially crafted archive to the library causing RCE, modification of files or other malignancies in the context of whatever the user is running this library as, through the...
ELog security vulnerabilities
ELog is an electronic logging software with a web interface by the individual developer Stefan Ritt. ELog suffers from a security vulnerability that stems from the ability of an authenticated user to modify or overwrite configuration files, potentially leading to a denial of service. If execution...
CVE-2025-53880
A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list o...
PT-2025-54840
Уязвимость программного обеспечения Paragon Hard Disk Manager связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю изменить произвольные файлы...
Buffalo Wi-Fi router WXR9300BE6P series vulnerable to path traversal
Overview Wi-Fi router WXR9300BE6P series provided by BUFFALO INC. contains the following vulnerability. Path traversal CWE-22 - CVE-2025-61941 Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Arbitrary file may be altered by ...
CVE-2025-61941
A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered by an administrative user who logs in to the affected product. Moreover, arbitrary OS command may be executed via some file alteration...
Buffalo WXR9300BE6P Series path traversal vulnerability
The BUFFALO WXR9300BE6P Series is a series of wireless routers from BUFFALO Japan. A path traversal vulnerability exists in the BUFFALO WXR9300BE6P series prior to version 1.10, which stems from the presence of a path traversal issue that could lead to arbitrary file modification and arbitrary OS...
