CVE-2024-34344

Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insufficient validation of the path parameter in the NuxtTestComponentWrapper, an attacker can execute arbitrary JavaScript on the server side, which allows them to execute arbitrar...

CVE-2024-41692

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system. Successful exploitation of this...

CVE-2024-39364

Advantech ADAM-5630 has built-in commands that can be executed without authenticating the user. These commands allow for restarting the operating system, rebooting the hardware, and stopping the execution. The commands can be sent to a simple HTTP request and are executed by the device...

CVE-2024-39703

In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint...

PT-2026-1989

Name of the Vulnerable Software and Affected Versions Katana Network Development Starter Kit affected versions not specified Description The Katana Network Development Starter Kit contains a command injection flaw in the executeCommand function, potentially allowing remote code execution. The iss...

Kiro IDE 安全漏洞

Kiro IDE is an integrated development environment from Kiro Open Source. A security vulnerability exists in Kiro IDE versions prior to 0.6.18, which stems from a command injection vulnerability in the handling of specially crafted workspace folder names, which could lead to the execution of...

PT-2026-1805

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.4.0.0 Dell PowerProtect Data Domain LTS2025 version 8.3.1.10 Dell PowerProtect Data Domain LTS2024 versions 7.13.1.0 through 7.13.1.40 Dell PowerProtect Data Domain LTS2023 versions...

CVE-2025-56425

An issue was discovered in the AppConnector component version 10.10.0.183 and earlier of enaio 10.10, in the AppConnector component version 11.0.0.183 and earlier of enaio 11.0, and in the AppConnctor component version 11.10.0.183 and earlier of enaio 11.10. The vulnerability allows authenticated...

CVE-2025-56425

An issue was discovered in the AppConnector component version 10.10.0.183 and earlier of enaio 10.10, in the AppConnector component version 11.0.0.183 and earlier of enaio 11.0, and in the AppConnctor component version 11.10.0.183 and earlier of enaio 11.10. The vulnerability allows authenticated...

Discord Controlled NodeCordRAT Steals Chrome Data via NPM Packages

Zscaler ThreatLabz identifies three malicious NPM packages mimicking Bitcoin libraries. The NodeCordRAT virus uses Discord commands to exfiltrate MetaMask data and Chrome passwords...

MAL-2026-168 Malicious code in @zuora-marketing/linting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcfd1151af868e694a4a79307ce1284331ad88b8ff631651f3fd2c47fbf342a The package @zuora-marketing/linting was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @zuora-marketing/linting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcfd1151af868e694a4a79307ce1284331ad88b8ff631651f3fd2c47fbf342a The package @zuora-marketing/linting was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in icon-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c036555d918021fafe661296499aab549fac428c2b9cefb72670f63914dfa974 The package icon-service was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @kyriba/mf-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1b2dd3479a677d975d11f8fe29e2cb24cbcc3a90c05081fa1632822c7c2f5a The package @kyriba/mf-kit was found to contain malicious code. Source: ghsa-malware 5316d385b586e69d62f54165ad5c9a973bf0bdfc3ef7023a0f7f53c784bb7131...

MAL-2026-165 Malicious code in @kyriba/mf-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1b2dd3479a677d975d11f8fe29e2cb24cbcc3a90c05081fa1632822c7c2f5a The package @kyriba/mf-kit was found to contain malicious code. Source: ghsa-malware 5316d385b586e69d62f54165ad5c9a973bf0bdfc3ef7023a0f7f53c784bb7131...

Malicious code in @kyriba/ui-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7e92deb9c473f963b37b51df844bbea3a31ce650797efd9e410e27219be1f2 The package @kyriba/ui-workspace was found to contain malicious code. Source: ghsa-malware...

MAL-2026-166 Malicious code in @kyriba/ui-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7e92deb9c473f963b37b51df844bbea3a31ce650797efd9e410e27219be1f2 The package @kyriba/ui-workspace was found to contain malicious code. Source: ghsa-malware...

MAL-2026-164 Malicious code in @kyriba/data-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d5e12cfb929e029a7fcb5f87399a07fa074d8e30025eb93914120e703f142a The package @kyriba/data-frontend was found to contain malicious code. Source: ghsa-malware...

Malicious code in @kyriba/data-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d5e12cfb929e029a7fcb5f87399a07fa074d8e30025eb93914120e703f142a The package @kyriba/data-frontend was found to contain malicious code. Source: ghsa-malware...

Malicious code in do-not-install-this-package-002 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc0f1ed2645f37e4b8df59ccca64288a02f6cc07009489c54565dfc5b0089f19 During installation, the package exfiltrates env variables and data from different process memory to a remote location --- Category: MALICIOUS - The campaign h...