3553 matches found
PT-2025-47463
Name of the Vulnerable Software and Affected Versions Sound4 FIRST affected versions not specified Description The Sound4 FIRST web-based management interface is susceptible to Remote Code Execution RCE through a maliciously crafted firmware update package. The system’s update process does not...
CVE-2025-63215
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...
CVE-2025-63215
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...
CVE-2025-63215
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...
CVE-2025-63215
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...
PT-2025-47408
Name of the Vulnerable Software and Affected Versions Sound4 IMPACT affected versions not specified Description The Sound4 IMPACT web-based management interface contains a flaw that allows for Remote Code Execution RCE through a specially crafted firmware update package. The system does not...
EUVD-2025-180542
@apollo/composition has Improper Enforcement of Access Control on Interface Types and Fields...
CVE-2024-21635
Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. When a user changes their password, the existing list of Access Tokens stay valid instead of expiring. If a user finds that their account has been compromised, they can update the...
MAL-2025-187224 Malicious code in greatfilter-repository-on-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8993c23be3f620ea4cdf1b3d179ef47765d2d76f1f4247138a42102ea67ea949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-103852
Malicious code in manualrodentz3n npm...
EUVD-2025-96536
Malicious code in manualhookwormz3n npm...
Malicious code in manual_vicuna_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669407636cffd7bc6f758a2254226964fa5721e040f76bef4bb53979bbc92443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74472
Malicious code in manualyakyellow-29 npm...
EUVD-2025-76345
Malicious code in manualwoodpecker-silentdev npm...
EUVD-2025-76346
Malicious code in manualplanarian-excellentdev npm...
MAL-2025-105594 Malicious code in manual_echidna-gooddev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9094775893dbee81c8d6a1036989e75384a92aa7b42f08ae3735e89a51e437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78839
Malicious code in manualcentipedez3n npm...
MAL-2025-105598 Malicious code in manual_rook_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d359c4db4d9038edec67a74df026c3109861d6d052019902829c5263da8311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...