Malicious code in table-awk-epsilon-unix-route (npm)

The package table-awk-epsilon-unix-route was found to contain malicious code...

Malicious code in awk-web-catch-double-compile (npm)

The package awk-web-catch-double-compile was found to contain malicious code...

MAL-2025-33440 Malicious code in small-debug-awk-hash-parse (npm)

The package small-debug-awk-hash-parse was found to contain malicious code...

MAL-2025-33157 Malicious code in short-decrypt-mock-awk-function (npm)

The package short-decrypt-mock-awk-function was found to contain malicious code...

Malicious code in star-awk-interface-final-psi (npm)

The package star-awk-interface-final-psi was found to contain malicious code...

MAL-2025-15220 Malicious code in awk-web-catch-double-compile (npm)

The package awk-web-catch-double-compile was found to contain malicious code...

MAL-2025-34363 Malicious code in table-awk-epsilon-unix-route (npm)

The package table-awk-epsilon-unix-route was found to contain malicious code...

MAL-2025-15219 Malicious code in awk-serialize-upsilon-web-yaml (npm)

The package awk-serialize-upsilon-web-yaml was found to contain malicious code...

MAL-2025-15098 Malicious code in authorize-daemon-container-awk-kernel (npm)

The package authorize-daemon-container-awk-kernel was found to contain malicious code...

CVE-2019-5139

An exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts...

SUSE-SU-2025:20336-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues: - test for a concretely missing certificate rather than just the directory, as the latter is now also provided by openssl-3 - Re-create java-cacerts with SOURCEDATEEPOCH set for reproducible builds bsc1229003 - explicit remove...

EulerOS 2.0 SP12 : busybox (EulerOS-SA-2025-1185)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate...

CVE-2019-5141

An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted iwserverip parameter can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. An attacker can...

CVE-2019-5136

An exploitable privilege escalation vulnerability exists in the iwconsole functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send command...

CVE-2019-5138

An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file can cause arbitrary busybox commands to be executed, resulting in remote control over the device. An attacker...

CVE-2019-5165

An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configured device hostname can cause the device to interpret select remote traffic as local traffic, resulting in a bypass of web authentication. An attack...

CVE-2019-5143

An exploitable format string vulnerability exists in the iwconsole coniowritestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands whil...

CVE-2019-5148

An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packe...

CVE-2019-5140

An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. An attack...

CVE-2019-5162

An exploitable improper access control vulnerability exists in the iwwebs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as...