4844 matches found
EUVD-2025-180491
Malicious code in aether-start-lepton-mdx npm...
EUVD-2025-176217
Malicious code in start-io-nightwatch-install npm...
EUVD-2025-178665
Malicious code in gravity-start-triton-oauth npm...
EUVD-2025-178282
Malicious code in javascript-start-halley-eclipse npm...
EUVD-2025-176290
Malicious code in solarnebula-nextjs-start-request npm...
EUVD-2025-178629
Malicious code in gulp-oberon-husky-start npm...
EUVD-2025-180421
Malicious code in antares-jasmine-rocket-start npm...
Malicious code in aether-start-lepton-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36aedbc551c0fdb6d6a164bc853c5330db99a2f5ebdc2bd7c415435ac4acf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177604
Malicious code in nightmare-start-meteor-node-sass npm...
EUVD-2025-177647
Malicious code in neptunology-gravity-start-interferometry npm...
CVE-2025-60689
An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...
CVE-2025-60689
An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...
CVE-2025-60689
CVE-2025-60689 affects Linksys E1200 v2 routers (firmware E1200_v2.0.11.001_us.tar.gz). The issue is an unauthenticated command-injection in the httpd Start_EPI function: user-supplied CGI parameters (wl_ant, wl_ssid, wl_rate, ttcp_num, ttcp_ip, ttcp_size) are concatenated into system commands an...
CVE-2025-40180
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...
kernel: pstore/ram: Check start of empty przs during init
An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...
kernel: pstore/ram: Check start of empty przs during init
An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...
EUVD-2025-124598
Malicious code in nconf-nodemon-start-postcss npm...
EUVD-2025-111994
Malicious code in karma-rimraf-start-hercules npm...
Malicious code in acamar-cosmos-start-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa5ae8bc81623cf737a4266be3ae0e7ad05a0df1ec0880493ee4f35ccb7ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...