CVE-2026-119601

A flaw was found in afflib. An attacker could exploit this vulnerability by supplying a specially crafted Advanced Forensic Format AFF image file containing mismatched page and sector sizes. When processed by an affected tool, this flaw causes a heap out-of-bounds write, resulting in memory...

Malicious code in checkout-checkout-test-block-aff (npm)

Source: amazon-inspector ae29db4ecd6fc6c7250d5b388eb957c9b0d1ec2b8a8966928c3da7c31aa4bf87 On require of the main entry, index.js loads loader.js which downloads a platform-specific executable from hardcoded Cloudflare Workers hosts oob-worker.cf101-adf.workers.dev, oob-worker.cf100-416.workers.de...

Malicious code in @car-loans/online-sign-aff (npm)

Part of a dependency confusion attack campaign targeting the @car-loans, @fb-deposit, and @debit-ib npm scopes. The attacker npm user pik-libs published 25 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version resolution,...

Malicious code in @car-loans/online-scoring-aff (npm)

Part of a dependency confusion attack campaign targeting the @car-loans, @fb-deposit, and @debit-ib npm scopes. The attacker npm user pik-libs published 25 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version resolution,...

Malicious code in @car-loans/applicaion-aff (npm)

Part of a dependency confusion attack campaign targeting the @car-loans, @fb-deposit, and @debit-ib npm scopes. The attacker npm user pik-libs published 25 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version resolution,...

Malicious code in @car-loans/application-aff (npm)

Part of a dependency confusion attack campaign targeting the @car-loans, @fb-deposit, and @debit-ib npm scopes. The attacker npm user pik-libs published 25 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version resolution,...

Malicious code in @car-loans/deal-aff (npm)

Part of a dependency confusion attack campaign targeting the @car-loans, @fb-deposit, and @debit-ib npm scopes. The attacker npm user pik-libs published 25 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version resolution,...

Malicious code in @help-forms/application-aff (npm)

Source: amazon-inspector ab5ab5493acb5b3ffcab7f80dbdf34e1485bbe5d5d03978949199cdabf6f676a @help-forms/[email protected] ships a heavily obfuscated postinstall script scripts/postinstall.js, obfuscator.io fingerprints: rotated string array, base64+decodeURIComponent decoder, hex-named...

Hitachi Energy AFS, AFR and AFF Series

RISK EVALUATION Successful exploitation of this vulnerability could compromise the integrity of the product data and disrupt its availability. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Malicious code in poglymer-ogmih-aff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f55eb5c0144224cb939e741739d78f34644210a136487bf3d9c1ca124f8131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-138550

Malicious code in polymer-afavof-aff npm...

EUVD-2025-138539

Malicious code in polymer-aff-radaodd npm...

EUVD-2025-138859

Malicious code in poglymer-ogmih-aff npm...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aff-gafai (1.0.0)

nudela-aff-gafai NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aff-gafai and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163725...

EUVD-2019-15072

Malware in sbrugna...

EUVD-2018-19732

Malware in sbrugna...

CVE-2019-5497

NetApp AFF A700s Baseboard Management Controller BMC firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution...

PT-2024-22727 · Wpvibes · Wpvibes Elementor Addon Elements

Name of the Vulnerable Software and Affected Versions: WPVibes Elementor Addon Elements versions 1.12.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

USN-6518-1 afflib vulnerability

Luis Rocha discovered that AFFLIB incorrectly handled certain input files. If a user or automated system were tricked into processing a specially crafted AFF image file, a remote attacker could possibly use this issue to cause a denial of service via application crash. CVE-2018-8050...

NetApp: FAS 8300/8700 & AFF A400 BMC Security Advisory - US

Lenovo Security Advisory: LEN-30687 Potential Impact: Unauthorized arbitrary command execution Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-17274 Summary Description: NetApp reported a vulnerability in FAS 8300/8700 and AFF A400 Baseboard Management Controller BMC firmwa...