EUVD-2025-180125

Malicious code in bash-load-fast-unix-route npm...

EUVD-2025-180124

Malicious code in bash-runtime-log-static-java npm...

EUVD-2025-180123

Malicious code in bash-serialize-decode-grid-sudo npm...

EUVD-2025-180122

Malicious code in bash-unix-rho-sigma-quick npm...

EUVD-2025-180121

Malicious code in bash-water-resolve-unix-error npm...

EUVD-2025-180120

Malicious code in bash-xml-transpile-good-catch npm...

EUVD-2025-179847

Malicious code in catch-bash-mu-daemon-slow npm...

EUVD-2025-179848

Malicious code in cat-void-bash-cache-bundle npm...

MAL-2025-185761 Malicious code in bash-water-resolve-unix-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa208583cc81c4598465e3b44b85048c1d4a747fe9087200fc8eabae365d5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178349

Malicious code in iota-bash-bundle-delta-encrypt npm...

EUVD-2025-176800

Malicious code in rain-final-bash-bad-resolve npm...

EUVD-2025-179846

Malicious code in catch-bash-string-long-catch npm...

CVE-2024-45301: Improper Input Validation

Mintty is a terminal emulator for Cygwin, MSYS, and WSL. In versions 2.3.6 through 3.7.4, several escape sequences can cause the mintty process to access a file in a specific path. It is triggered by simply printing them out on bash. An attacker can specify an arbitrary network path, negotiate an...

📄 Ilevia EVE X1/X5 Server 4.7.18.0.eden Root Privilege Escalation

Ilevia EVE X1/X5 Server version 4.7.18.0.eden has a misconfiguration in the sudoers file that permits passwordless execution of specific Bash shell scripts via sudo, exposing a critical privilege escalation vulnerability. When such scripts are writable by a web-facing user www-data or accessible...

Exploit for Race Condition in Canonical Ubuntu_Linux

🔐 Linux Privilege Escalation Enumeration Tool !Linuxht...

F5 BIG-IP iHealth Tool Privilege Bypass Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A privilege bypass vulnerability exists in the BIG-IP's iHealth tool a module of the TMOS Shell. The vulnerability occurs...

CVE-2025-61958

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell. For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a...

EUVD-2025-34629

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell. For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a...

CVE-2025-61958

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell. For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a...

CVE-2025-61958

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell. For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a...