MAL-2026-16464 Malicious code in hachutis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455f1d04545c9ed17722705fe61415d7e536e2800c2a3c588ab69985004c73b9 The tarball ships three undeclared prebuilt executables under bin/ bin/cli, bin/cli-linux-amd64, and an 81 MB Bun-compiled bin/cli-http-linux that ar...

CVE-2022-28571

D-link 882 DIR882A1FW130B06 was discovered to contain a command injection vulnerability in/usr/bin/cli...

PT-2022-2537 · D Link · D-Link Dir-882

Name of the Vulnerable Software and Affected Versions: D-link DIR-882 version A1 FW130B06 Description: A command injection issue was found in the /usr/bin/cli endpoint, related to the handling of symbolic links. This could allow a remote attacker to execute arbitrary commands due to inadequate da...

CVE-2017-7307

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file...

CVE-2017-7307: Incorrect Permission Assignment for Critical Resource

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file...

PT-2017-17653

Name of the Vulnerable Software and Affected Versions Riverbed RiOS versions prior to 9.0.1 Description The issue makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file, due to improper restriction of shell...

PT-2016-6620

Name of the Vulnerable Software and Affected Versions Accellion Kiteworks appliances versions prior to kw2016.03.00 Description The issue allows local users to gain privileges via unspecified vectors due to the use of setuid-root permissions for /opt/bin/cli. Recommendations For versions prior to...

CVE-2016-5662: Undefined Security Weakness

Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors...