MAL-2025-7347 Malicious code in @crabas0npm/inventore-ea-iure (npm)

The package @crabas0npm/inventore-ea-iure was found to contain malicious code...

MAL-2025-9617 Malicious code in @waitfortea2024/dignissimos-ea-quaerat (npm)

The package @waitfortea2024/dignissimos-ea-quaerat was found to contain malicious code...

Malicious code in @diotobtea/soluta-ea-minus (npm)

The package @diotobtea/soluta-ea-minus was found to contain malicious code...

Malicious code in @sourceressj2001/doloribus-ea-nobis (npm)

The package @sourceressj2001/doloribus-ea-nobis was found to contain malicious code...

Malicious code in @teamteanpm2024/ea-consectetur-commodi (npm)

The package @teamteanpm2024/ea-consectetur-commodi was found to contain malicious code...

Malicious code in @taktikangea/ea-optio-corporis (npm)

The package @taktikangea/ea-optio-corporis was found to contain malicious code...

MAL-2025-7725 Malicious code in @crabas0npm2/temporibus-blanditiis-ea (npm)

The package @crabas0npm2/temporibus-blanditiis-ea was found to contain malicious code...

MAL-2025-9511 Malicious code in @teamteanpm2024/ea-repellat-error (npm)

The package @teamteanpm2024/ea-repellat-error was found to contain malicious code...

MAL-2025-8023 Malicious code in @hishprorg/ea-excepturi (npm)

The package @hishprorg/ea-excepturi was found to contain malicious code...

MAL-2025-9130 Malicious code in @npmshivamkalsi/quam-natus-odit-ea (npm)

The package @npmshivamkalsi/quam-natus-odit-ea was found to contain malicious code...

MAL-2025-13883 Malicious code in @zittertea/nam-autem-ea (npm)

The package @zittertea/nam-autem-ea was found to contain malicious code...

MAL-2025-7585 Malicious code in @crabas0npm/unde-consequuntur-ea (npm)

The package @crabas0npm/unde-consequuntur-ea was found to contain malicious code...

CVE-2025-43982

Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by default. There is a hidden hard-coded root account that cannot be disabled in the GUI...

Tuoshi NR500-EA 安全漏洞

Tuoshi NR500-EA is a wireless router from Tuoshi China. A security vulnerability exists in Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43, which stems from the default enablement of SSH service and the presence of a hard-coded root account...

CVE-2025-43982

Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by default. There is a hidden hard-coded root account that cannot be disabled in the GUI...

PT-2025-33067 · Unknown · Shenzhen Tuoshi Nr500-Ea +1

Name of the Vulnerable Software and Affected Versions: Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLIC version 3.4.2731.16.43 Description: Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLIC devices enable the SSH service by default. A hidden, hard-coded root account exists that cannot be disabled through th...

CVE-2024-48440

Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 was discovered to contain a command injection vulnerability via the component atcommand.asp...

CVE-2019-0383

Transaction Management in SAP Treasury and Risk Management corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privilege...

CVE-2025-4043 Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code

An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot...

CVE-2025-4043

CVE-2025-4043 affects Milesight UG65-868M-EA gateways (pre-60.0.0.46 firmware). An admin user can gain unauthorized write access to /etc/rc.local, which is executed at system boot, enabling persistence. Public documents describe risk as admin-command injection by a privileged user (CISA ICS advis...