TP-Link’s various products have security vulnerabilities

TP-LINK Archer is a series of routers produced by TP-LINK Corporation. Several TP-Link products have security vulnerabilities. These vulnerabilities stem from improper handling of wireless control management CLI commands. This could allow authenticated attackers with administrative privileges to...

CVE-2025-15518: Improper Neutralization of Special Elements used in an OS Command

Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

PT-2026-27066

Name of the Vulnerable Software and Affected Versions WAGO Lean Managed Switch 852-1812 and other WAGO products versions prior to a fix for CVE-2026-3587 Description An unauthenticated remote attacker can exploit a hidden function within the Command Line Interface CLI prompt to bypass the...

Siemens APE1808 Incorrect Provision of Specified Functionality (CVE-2025-58325)

An Incorrect Provision of Specified Functionality vulnerability CWE-684 in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may allow a local authenticated attacker to execute system commands via crafted CLI commands. This plugin only works with...

Siemens APE1808 Improper Neutralization of Special Elements used in an OS Command (CVE-2025-4230)

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. This plugin only works with...

TP-Link’s various products have security vulnerabilities

TP-LINK Archer is a series of routers produced by TP-LINK Corporation. Several TP-Link products have security vulnerabilities. These vulnerabilities stem from improper handling of Modem Management CLI command inputs. This could allow authenticated attackers with administrative privileges to execu...

CVE-2025-15519: Improper Neutralization of Special Elements used in an OS Command

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.4.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-converter (>=8.4.0, <=8.8.2) +109 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.model (>=6.5.25, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.model MAVEN version =6.5.25, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.8.2 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.4.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.7.7, <=7.4.5) +209 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (>=5.6.22, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version =5.6.22, =3.4.0, =5.7.7, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =6.2.0, =6.8.0, =6.4.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.7, =6.8.0 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=7.4.5) +223 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=1.0.0, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =1.0.0, =4.0.0, =5.6.5, =4.1.0, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =4.0.0, =4.0.0, =8.8.2 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...

au.csiro.pathling:encoders (>=5.1.0, <=9.5.0), au.csiro.pathling:fhir-server (>=5.3.1, <=7.2.0) +323 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (>=0.0.1, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =4.0.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =5.2.1 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...

au.csiro.pathling:encoders (>=5.1.0, <=9.5.0), au.csiro.pathling:fhir-server (>=5.3.1, <=7.2.0) +359 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (>=0.0.1, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version =0.0.1, =5.1.0, =5.3.1, =6.2.1, =5.3.1, =5.3.1, =5.3.0, =0.0.9, =5.6.5, =5.6.5, =5.6.5, =3.4.0, =5.6.5, =4.1.0, =4.0.3, =8.8.2 and more Source cves: CVE-2026-33180 Source advisory: MEND:CVE-2026-33180...

flywheel-cli (>=10.1.1.dev1, <=10.7.0), flywheel-migration (>=0.12.1, <=0.16.0.dev1) +2 more potentially affected by CVE-2026-32711 via pydicom (1.3.0)

pydicom PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pydicom and may be impacted: - flywheel-cli =10.1.1.dev1, =0.12.1, =0.6.14, =0.6.16 - pymedphys 0.21.0 Source cves: CVE-2026-32711 Source advisory: OSV:GHSA-V856-2RF8-9F28...

agent-skill-poc

Agent Skill POC - LLM-driven Interactive CLI Agent An LLM-dri...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, jaeger-fips, gitlab-workhorse-ce, opencost, jaeger, ferretdb, glab, flux-operator-fips, datadog-agent-fips, livekit-cli, opencost-fips, osv-scanner, datadog-agent, flux-operator...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, jaeger-fips, gitlab-workhorse-ce, opencost, jaeger, ferretdb, glab, flux-operator-fips, datadog-agent-fips, livekit-cli, opencost-fips, osv-scanner, datadog-agent, flux-operator...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, jaeger-fips, gitlab-workhorse-ce, opencost, jaeger, ferretdb, glab, flux-operator-fips, datadog-agent-fips, livekit-cli, opencost-fips, osv-scanner, datadog-agent, flux-operator...

Malicious Package

Overview novi-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview couplus-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2026-1961 Malicious code in novi-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8efd6fadd98f176db87625b5ab11bb8c301425b5cac56b3a6e06cea11480e5 The package novi-cli was found to contain malicious code. Source: ghsa-malware 6869c6ff2172bab7034855a5b3343c548e54f977036706052a989d381b471ce5 Any...