Microsip ASD version_firebird UNC binary planting RCE

Unauthenticated GET /versionfirebird?path= runs gbak.exe from attacker share as LocalSystem. !/usr/bin/env python3 -- coding: utf-8 -- """Microsip ASD unauthenticated versionfirebird UNC gbak binary planting RCE.""" from future import annotations from urllib.parse import quote from kittysploit...

Microsip ASD — Unauthenticated UNC Binary-Planting RCE — Detect

Fingerprint / reachability check for Microsip ASD — Unauthenticated UNC Binary-Planting RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Microsip ASD — Unauthenticated UNC Binary-Planting RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Malicious code in carssa-saad-asd (npm)

Source: amazon-inspector 09c0fef7ff1ea414f1893b3885a13deb63063cfd06d6d805e9dc8e37cab4302a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in carssa-sadad-asd (npm)

Source: amazon-inspector 2e90d81f8474f49de17a227e1ba2f2b065476d7864becc642a25ae0acd0126af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in asd-nufgttr-sssda (npm)

Source: amazon-inspector 2011b9131a924e66b81845f19d85cde10d438c7c8596486e86aaa2823ef3ef4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in asd-nufgttr-nutry (npm)

Source: amazon-inspector fdb6a039e3aabfbed5a52d6e84645d64686cfd1f9c2883cf61d837d99628e4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in asd-nutr-sdf (npm)

Source: amazon-inspector 75f4e9ddda9764c9e595a56661f22272f2307c6f8d623940df1f9fd21e55f7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in asd-nuttr-sssda (npm)

Source: amazon-inspector cb46c94c2bafd5273e87086efe9d69ae6f031258319eb491675cd3ffee42338e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in asd-nufgttr-sdf (npm)

Source: amazon-inspector 89d5f69c15cf270b02f1b975f72f44bf6a61a3c7eb813f6e1170733445b717b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in asd-tt (npm)

The package asd-tt was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in test-test-asd-1 (PyPI)

Source: kam193 f6284e15edda08ed04fabd1d9f958e5455bc0a60f3127b35f9f49ea8ee36a49c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malware in backup2-asd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in backup2-asd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fe96add7d70ce5933988f1c78b934187e279d88618bd3f211de3d719177168 The tarball published as [email protected] is a Vite-built browser application branded 'Lucide' rather than a Node library. package.json declares mai...

Malicious Package

Overview backup2-asd is a malicious package. This package is part of a malicious npm campaign that abused the registry to distribute ad-supported web proxy applications disguised as educational websites. The package contains web assets intended to bypass network restrictions and generate...

AZL-74400 CVE-2025-71075 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asdpciremove function fails to synchronize with pending tasklets before freeing the asdha structure, leading to a potential use-after-free vulnerability. When a device...

CVE-2025-71075

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asdpciremove function fails to synchronize with pending tasklets before freeing the asdha structure, leading to a potential use-after-free vulnerability. When a device...

CVE-2025-71075

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asdpciremove function fails to synchronize with pending tasklets before freeing the asdha structure, leading to a potential use-after-free vulnerability. When a device...

Linux Distros Unpatched Vulnerability : CVE-2025-71075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: aic94xx: fix use-after-free in device removal path The asdpciremove function fails to synchronize with pending tasklets before freeing the asdha structure...

Malicious code in munya-mipta-asd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31866d009f41f1bd165c356409be795693654f917be4830e3fe683c48b33e1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asd-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f4e9ddda9764c9e595a56661f22272f2307c6f8d623940df1f9fd21e55f7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...