Root-My-Galaxy-Payloads

Root My Galaxy Payloads This repository contains the device-s...

Malicious code in tailwind-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7605f83f25074e67fa0c72679d47f50fe781dae40e4560ee0a216e91320014 [email protected] is a typosquat of tailwindcss-animate. Its index.js appends an evalatob'...' blob that runs whenever the plugin is required e.g....

CVE-2026-24083

Memory Corruption while processing IOCTL device driver requests with invalid arguments...

CVE-2026-25289

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

EUVD-2026-52737

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

CVE-2026-25289

CVE-2026-25289 describes memory corruption/stack-based overflow when processing Device Capability Extended attributes in NAN Service Discovery Frames with invalid length values in WLAN firmware. The issue is tied to the firmware image referenced in the August 2026 Qualcomm security bulletin; no e...

CVE-2026-25289 Stack-based Buffer Overflow in WLAN Firmware

Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...

CVE-2026-24083

Memory Corruption while processing IOCTL device driver requests with invalid arguments...

EUVD-2026-52734

Memory Corruption while processing IOCTL device driver requests with invalid arguments...

MINI-P425-4C93-R82H

Bulletin has no description...

MINI-3HRC-HH2V-RVVH

Bulletin has no description...

CVE-2026-61514

CVE-2026-61514 affects Puwell IP Camera firmware 2.x to 4.x, where an authentication bypass allows unauthenticated remote access by sending protocol-conforming packets to TCP port 23456. The issue stems from an unvalidated Session field in the proprietary control protocol header, enabling attacke...

MINI-GX95-GVRW-R249

Bulletin has no description...

MINI-H72P-W447-M479

Bulletin has no description...

MINI-W537-CM95-VWM5

Bulletin has no description...

MINI-MM64-G928-R7C6

Bulletin has no description...

Malicious code in @keyv/memcache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738202807ef51e0d987243e641bb2e97a2f4535bed388d631d80ead963a82b2f Package @keyv/[email protected] is a Keyv storage adapter for Memcache. No install-time lifecycle scripts, network exfiltration, credential access,...

Malicious code in @keyv/mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e7b09271ef0584c4ab876898b9cb09c6cc8a0408bd4bbb7d623726d12c392e @keyv/mysql is the MySQL storage adapter for the keyv key-value abstraction. No exfiltration, install-time fetch-and-execute, silent-relay, credentia...

MAL-2026-12013 Malicious code in @keyv/encrypt-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c28175ab56ea558a0634ba48421de59c05f3ebc5e06335162cd2d30a6972495 No static or traced-code signals of installer-side attack were observed in this version of @keyv/encrypt-node. No lifecycle-script fetch-and-execute,...

Malicious code in @keyv/encrypt-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c28175ab56ea558a0634ba48421de59c05f3ebc5e06335162cd2d30a6972495 No static or traced-code signals of installer-side attack were observed in this version of @keyv/encrypt-node. No lifecycle-script fetch-and-execute,...