46 matches found
Malicious code in wdb-sdk (npm)
Source: amazon-inspector 05323f987b64131618be124040867a2acb216aef96952a6a3dfc11c615501500 package.json declares "preinstall": "./dist/runtime.node", causing npm to spawn the shipped file as an executable on every install on Linux. Despite the .node extension which would normally indicate a Node-A...
Malicious code in wdb-cli (npm)
Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the package tarball sha256 36abd242…6d36. The binary has no...
Malicious code in wdb-core (npm)
Source: google-open-source-security 146faaf0d97c6a533a969bc3f3f117811f9317dc865ed4ab37f1679842ddeaae This package was compromised as part of the IronWorm campaign. This campaign executes a malicious binary payload during installation via a preinstall hook. The payload is a Rust-built infostealer...
MAL-2026-4714 Malicious code in wdb-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05323f987b64131618be124040867a2acb216aef96952a6a3dfc11c615501500 package.json declares "preinstall": "./dist/runtime.node", causing npm to spawn the shipped file as an executable on every install on Linux. Despite...
Malicious code in wdb-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the packag...
MAL-2026-4713 Malicious code in wdb-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the packag...
CVE-2026-25772
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...
CVE-2026-25772
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...
PT-2026-25925
Name of the Vulnerable Software and Affected Versions Wazuh versions 4.4.0 through 4.14.2 Description Wazuh is a free and open source platform used for threat prevention, detection, and response. A stack-based buffer overflow exists in the Wazuh Database synchronization module wdb delta event.c...
clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in cli_bm_addpatt
Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4514655573966848 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadWDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...
clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in parse_regex
Detailed Report: https://oss-fuzz.com/testcase?key=5137273091850240 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadWDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7e6d5971a060 Crash State: parseregex parsereg...
clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in add_hash
Detailed Report: https://oss-fuzz.com/testcase?key=6510977513029632 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000003b3 Crash State: addhash loadregexmatcher...
clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in parse_regex
Detailed Report: https://oss-fuzz.com/testcase?key=6157029266554880 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadWDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff3890d260 Crash State: parseregex parsereg...
clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in cli_bm_addpatt
Detailed Report: https://oss-fuzz.com/testcase?key=5271728031137792 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000001017 Crash State: clibmaddpatt addhash...
clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in load_regex_matcher
Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4580711766556672 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...
clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in parse_regex
Detailed Report: https://oss-fuzz.com/testcase?key=5057643943690240 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000004201 Crash State: parseregex parseregex parseregex...
CVE-2021-31793
An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...
CVE-2021-31793
An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...
Code injection
An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...
CVE-2021-31793
The connected Red Hat and NVD records confirm CVE-2021-31793 affects NightOwl WDB-20-V2 devices (model: WDB-20-V2_20190314). A web server on port 80 can be accessed by unauthenticated users, enabling retrieval of snapshots and video streams via the /snapshot URI. The issue is described as an unau...