EUVD-2025-180101

Malicious code in beta-grep-cron-omega-validate npm...

EUVD-2025-179852

Malicious code in cat-encrypt-export-kappa-validate npm...

EUVD-2025-175701

Malicious code in visualize-validate-array-hot-analyze npm...

EUVD-2025-176828

Malicious code in quick-validate-transpile-cluster-route npm...

EUVD-2025-179844

Malicious code in catch-daemon-mock-emulate-validate npm...

Malicious code in visualize-validate-array-hot-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5405559277835b28bc4c8bb6db51998aa22c4fd91d1ef31c819a28799cc347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179758

Malicious code in char-xml-xml-validate-validate npm...

Malicious code in sun-serialize-parse-validate-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13920f3f0ca3140df6e86d32d1c7763b6f4bdfb166b23361ada1f3d12873e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177177

Malicious code in pi-validate-water-test-tau npm...

EUVD-2025-176140

Malicious code in sun-serialize-parse-validate-alert npm...

EUVD-2025-178827

Malicious code in function-bundle-log-validate-grid npm...

EUVD-2025-179052

Malicious code in error-validate-refactor-byte-lambda npm...

EUVD-2025-175959

Malicious code in theta-validate-meta-air-cat npm...

EUVD-2025-175879

Malicious code in tree-validate-info-signal-abstract npm...

CVE-2025-60694

A stack-based buffer overflow exists in the validatestaticroute function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The function improperly concatenates user-supplied CGI parameters routeipaddr03, routenetmask03, routegateway03 into fixed-size buffers v6,...

CVE-2025-60694

A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (specifically firmware E1200_v2.0.11.001_us.tar.gz ). The vulnerability is caused by the improper concatenation of user-supplied CGI parameters—specifically route_ipaddr_0~3,...

CVE-2025-40205

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfsencodefh The function btrfsencodefh does not properly account for the three cases it handles. Before writing to the file handle fh, the function only returns to the user...

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable() function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities allows a perpetrator to gain access to database-related information.

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability may all...

SQL Injection

Overview torrentpier/torrentpier is a bull-powered BitTorrent tracker engine. Affected versions of this package are vulnerable to SQL Injection via the validatemodecondition function in the modcp.php file when handling the topicid parameter. An attacker can execute arbitrary SQL queries by...

Cross-site Scripting (XSS)

Overview changedetection.io is a Website change detection and monitoring service Affected versions of this package are vulnerable to Cross-site Scripting XSS via the validateurl function. An attacker can execute arbitrary JavaScript code in the context of another user by injecting a malicious...