MAL-2025-55464 Malicious code in budi-sambel4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c436ec546345bd21477643cc37e5122865bb1b3a3b7e4d44fe79e4a1b82667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-nasipecel51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9e4709dff7751454c29be684cbca10ed083abe14ee7ebc0c63184259318fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53055 Malicious code in joni-martabak89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de80467aea2614210a7bd94bbe710e5743f43f54c67b768c954194bb34981e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61956 Missing Authentication for Critical Function in Radiometrics VizAir

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

EUVD-2025-37762

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

EUVD-2025-37400

ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow...

CVE-2025-34284

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-34284 Nagios XI < 2024R2 Authenticated Command Injection via WinRM Plugin

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validation of user-supplied parameters allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful exploitatio...

CVE-2025-59957 Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

EUVD-2019-17563

Malware in sbrugna...

EUVD-2019-8041

Malware in sbrugna...

EUVD-2020-24863

Malware in sbrugna...

EUVD-2007-6607

Malware in sbrugna...

EUVD-2010-3874

Malware in sbrugna...

EUVD-2017-15222

Malware in sbrugna...

EUVD-2008-6419

Malware in sbrugna...

EUVD-2014-8831

Malware in sbrugna...

EUVD-2014-0800

Malware in sbrugna...

EUVD-2018-4622

Malware in sbrugna...

EUVD-2019-3550

Malware in sbrugna...