MAL-2025-14400 Malicious code in alphard-ganymede-xanadu-apollo (npm)

The package alphard-ganymede-xanadu-apollo was found to contain malicious code...

MAL-2025-14781 Malicious code in archaeoastronomy-hugo-playwright-apollo (npm)

The package archaeoastronomy-hugo-playwright-apollo was found to contain malicious code...

MAL-2025-26221 Malicious code in metabolomics-apollo-brane-thermochronology (npm)

The package metabolomics-apollo-brane-thermochronology was found to contain malicious code...

MAL-2025-39753 Malicious code in xerxes-apollo-antares-proxima (npm)

The package xerxes-apollo-antares-proxima was found to contain malicious code...

MAL-2025-25586 Malicious code in loop-apollo-canopus-inquirer (npm)

The package loop-apollo-canopus-inquirer was found to contain malicious code...

MAL-2025-29305 Malicious code in pino-pretty-webdriver-manager-apollo-init (npm)

The package pino-pretty-webdriver-manager-apollo-init was found to contain malicious code...

MAL-2025-31807 Malicious code in react-native-apollo-upload-client (npm)

The package react-native-apollo-upload-client was found to contain malicious code...

MAL-2025-14657 Malicious code in apollo-regulus-commitizen-webdriverio (npm)

The package apollo-regulus-commitizen-webdriverio was found to contain malicious code...

MAL-2025-20585 Malicious code in firebase-babel-apollo-dotenv-safe (npm)

The package firebase-babel-apollo-dotenv-safe was found to contain malicious code...

Malicious code in auth0-apollo-astro-eclipse (npm)

The package auth0-apollo-astro-eclipse was found to contain malicious code...

Malicious code in apollo-mongodb-darkmatter-whitedwarf (npm)

The package apollo-mongodb-darkmatter-whitedwarf was found to contain malicious code...

⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Malware isn’t just trying to hide anymore—it’s trying to belong. We’re seeing code that talks like us, logs like us, even documents itself like a helpful teammate. Some threats now look more like developer tools than exploits. Others borrow trust from open-source platforms, or quietly build...

CVE-2025-53709

Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only installed on a small number of environments. Under specific circumstances, privileged users of secure-upload could have selected email templates not necessarily...

CVE-2025-5763

A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...

PT-2025-24101 · Tenda · Tenda Cp3

Name of the Vulnerable Software and Affected Versions: Tenda CP3 version 11.10.00.2311090948 Description: A critical issue has been found, affecting the function sub F3C8C of the file apollo, leading to command injection. The attack can be launched remotely. Recommendations: For Tenda CP3 version...

Tenda CP3 注入漏洞

Tenda CP3 is a smart camera from Tenda, a Chinese company. A command injection vulnerability exists in Tenda CP3 version 11.10.00.2311090948, which stems from the failure of the function subF3C8C in the file apollo to correctly filter constructed command special characters, commands, and so on. A...

The vulnerability of the Ribbon Communications Apollo 9608 platform, related to errors in privilege management, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-5763: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...

The vulnerability of the Ribbon Communications Apollo 9608 platform, related to an uncontrolled element in the search process, allows a hacker to trigger a service failure.

The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Ribbon Communications Apollo 9608 platform, related to the use of rigidly encrypted account data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform lies in the use of rigidly encrypted account data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...