CVE-2025-20379

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a saved search with a risky command using th...

CVE-2025-60682

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614B20230630 within the cloudupdatecheck binary, specifically in the sub402414 function that handles cloud update parameters. User-supplied 'magicid' and 'url' values are directly concatenated into shell...

Rockwell Automation FactoryTalk DataMosaix Private Cloud

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to take over accounts, steal credentials, redirect users to a malicious website, or bypass MFA. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

EUVD-2025-175866

Malicious code in try-data-signal-cloud-report npm...

EUVD-2025-179853

Malicious code in cat-compile-analyze-deploy-cloud npm...

Malicious code in moon-new-cloud-mu-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7213659a3b8201c11de4613fcf1612a6f3efe3bb58d2c69ab5633e9f00655521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179708

Malicious code in cloud-star-parse-fork-sandbox npm...

EUVD-2025-180521

Malicious code in abstract-interface-stub-delta-cloud npm...

EUVD-2025-177762

Malicious code in moon-old-gamma-deploy-cloud npm...

EUVD-2025-175634

Malicious code in water-execute-rain-root-cloud npm...

EUVD-2025-179699

Malicious code in cluster-protected-resolve-cloud-refactor npm...

EUVD-2025-177763

Malicious code in moon-new-cloud-mu-cat npm...

EUVD-2025-179709

Malicious code in cloud-fire-grid-kernel-cron npm...

EUVD-2025-177886

Malicious code in meta-boolean-analyze-decode-cloud npm...

EUVD-2025-175884

Malicious code in tree-awk-notify-beta-cloud npm...

EUVD-2025-179707

Malicious code in cloud-user-static-promise-stub npm...

EUVD-2025-179697

Malicious code in cluster-simple-encrypt-cloud-balance npm...

EUVD-2025-177791

Malicious code in mock-easy-tree-long-cloud npm...

EUVD-2025-179680

Malicious code in cold-phi-cloud-cluster-private npm...

Malicious code in moon-old-gamma-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5c4869ddd3ada1d30aaaa35c240e8d99748ce6917156ee14dd323fe2ec849a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...