CVE-2025-67858: Improper Neutralization of Argument Delimiters in a Command

A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to nft. This issue affects Foomuuri: from ? before 0.31...

PT-2026-1886

Name of the Vulnerable Software and Affected Versions Foomuuri versions prior to 0.27-2+deb13u1 Foomuuri versions prior to 0.31 Description An Improper Neutralization of Argument Delimiters issue exists in Foomuuri, potentially leading to integrity loss of the firewall configuration or other...

unit:fuzz_json: Heap-buffer-overflow in nxt_inet_addr

Detailed Report: https://oss-fuzz.com/testcase?key=5543399496417280 Project: unit Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasanunit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7710559e07bf Crash State: nxtinetaddr...

MAL-2025-184220 Malicious code in modasiv-kuvu-bavoiayabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e747ad4a0cf232e35f8f0a35548e3fcbebe473e503aa138a7066a10c61ae3eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d4fd24f766db186fd084cfe9dbd180867c7d37086daa61d32290053ab14a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-phoebe-mocha-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0c65dc66483e97c54b8468b7f9233fd0f70b6e6e03353e421697a43a22ca46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121515 Malicious code in lina-ubi28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6de706251ac92db5a38f8486f26952f643c2d01b83f28646c34f749dd04f19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-gandul57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5421f55e84cf010810f07b448a60a96759b9522736b191854e0f8e0074fd9232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116581 Malicious code in putri-pecel76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eb004962d55ff3ae30a34d72a9549fadf99b691d1bffdda9a6d50f2dfc1d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72074 Malicious code in bayu-gado-gado33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247239b232ad3dee54876fd7fcc723d61be3b7dc3f112ef042424fc2304f35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-brengkes23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce223e80cf87b90ab05b64c3f92b03d839e0da0a55b509f5c6b3a0c0c8e3915b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60945 Malicious code in nosy_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd54fa23f771f27c1d4d7c0aacc28762b2ae2e0dbcdf16eda6761bb9e7846fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2020-6148

Malware in sbrugna...

EUVD-2017-7341

Malware in sbrugna...

EUVD-2025-19892

Malicious code in bioql PyPI...

MCP JSON Config Detected (macOS)

Binary data macosxmcpjsonconfigdetected.nbin...

CVE-2025-6072

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.Thi...

CVE-2025-6072

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.Thi...

CVE-2025-6072

CVE-2025-6072 affects ABB RMC-100 and RMC-100 LITE. The root cause is a stack-based buffer overflow in the REST interface when processing JSON configuration, enabling overflow of the expiration date field (and related CVE-2025-6074 flow). Impact cited includes potential denial of service and expo...

CVE-2025-6072 Stack Buffer Overflow in MQTTCore

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.Thi...