MAL-2025-4574 Malicious code in primereact-sass-theme (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc148ba6f2b6ad7d439003a3b980ba24d27a619fda1198bfa32adfc54d5bb350 Any computer that has this package installed or running should be considered...

Malicious code in staking-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb6f84262bc3391750bfa34e411cac0d29c2bf8574e291b22e0a700bb0734554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-6579

A vulnerability has been identified in Spectrum Power 4 with Web Office Portal. An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system commands with administrative privileges. The security vulnerability could be exploited by an unauthenticated attacker wi...

CVE-2019-6675

BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with multiple servers are exposed to a vulnerability which allows an authentication bypass. This can result in a complete compromise of the system. This issue only impacts specific...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

Malicious code in pumptoolforvolumeandcomment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79449c55ca87bbd552651efe9b6e31f77902a2714c4e0fdf0717dcbbb32f7070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4282 Malicious code in pumptoolforvolumeandcomment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79449c55ca87bbd552651efe9b6e31f77902a2714c4e0fdf0717dcbbb32f7070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4285 Malicious code in rest-api-orchestrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20a9fa0a651580cbe0e418726dea2ca91f1a44a78c7bb29619bcd10bd0e8fbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4284 Malicious code in react-native-scrollpageviewtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcee80fff21305590dcf04ace763231bdd81fcc2ef72bf8492ed79a60a17cd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptopay-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcedc265cd35c85d1f001fe8dc2c4da5d52e5a4b473c125b7883a67e797ff4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4188 Malicious code in pdfgenei (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a635759afaf7991ad303d483dd330e7a814d936a1b14116346cdc8b42d52194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-15850

eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system...

CVE-2019-15849

eQ-3 HomeMatic CCU3 firmware 3.41.11 allows session fixation. An attacker can create session IDs and send them to the victim. After the victim logs in to the session, the attacker can use that session. The attacker could create SSH logins after a valid session and easily compromise the system...

ABB Cylon Aspect 3.08.03 (projectUpdateBSXFileProcess.php) Remote Guest2Root Exploit

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller is vulnerable to code execution and sudo...

ABB Cylon Aspect 3.08.03 (MIX->HTTPDownloadServlet) Remote Code Execution

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description ABB Cylon Aspect BMS/BAS is vulnerable to a critical flaw in the...

Malicious code in solsniperbyagave (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22d6ef63513cb6ba90c7d26166b050ff064c8ca07745dff68400cd9f0bf3b112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core_plugin_b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017d4d66c75e5abd747ac42ebec3611c23c459b9d627c55156dffafb700258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iterationplan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30c1be7f98eb865b7ab37c0f47fcf74149c6d9d734f558a119c77f68c686eb2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lol-ninegacha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332626b1c4ee5d04b9cf7d47646efa1f37df2e108866df823ccf410a9026d869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4137 Malicious code in ultimatepower (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79a2b1d92e7a7944260e21d39f2b6724e8903106957b245238be128a625245b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...