208 matches found
CVE-2026-3086: Out-of-bounds Write
GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
CVE-2026-3086 GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability
GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
CVE-2026-3086
GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
CVE-2026-3086
GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
CVE-2025-15089
CVE-2025-15089 affects the UTT Progressive 512W router, up to version 1.7.7-171114. The vulnerability is a buffer overflow in the function where the argument wepkey1 is handled by strcpy in the file /goform/APSecurity. Exploitation can be performed remotely, and public exploit details exist. Prac...
CVE-2025-65363: Improper Neutralization of Special Elements used in a Command
Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...
CVE-2025-34319
TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 discovered in V2.1.8-B20201030.1539 contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via...
Malicious code in aps-simple-viewer-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3d18d7c64f1636f4922e13d1cc9768c1516be07e755001ed729faff0a63c29 The package aps-simple-viewer-nodejs was found to contain malicious code...
MAL-2025-191564 Malicious code in aps-simple-viewer-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3d18d7c64f1636f4922e13d1cc9768c1516be07e755001ed729faff0a63c29 The package aps-simple-viewer-nodejs was found to contain malicious code...
EUVD-2025-144645
Malicious code in aps-leod-nutafyadtaf npm...
EUVD-2025-144660
Malicious code in aps-leod-manusfiad npm...
EUVD-2025-144647
Malicious code in aps-leod-nutafyadataf npm...
EUVD-2025-144648
Malicious code in aps-leod-nutafyad npm...
EUVD-2025-144640
Malicious code in aps-leod-nuty npm...
Malicious code in aps-leod-nutayfad (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b0c974c4621a9fec651a106e7c2ae3aed53f17b9d2072d228ccf856b76905e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-144641
Malicious code in aps-leod-nutayfad npm...
Malicious code in aps-ledang-maanassa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7540d8ef41409bf9b4f0220afc48bb67f127bfeea9b9059a61ad1f915fdc215f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-144665
Malicious code in aps-leod-manaro npm...
Malicious code in aps-leod-manui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b623ebba24e115110ac210386f447172f3a37c360c9b38937fcaebb37aba054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...