EUVD-2025-197753

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2025-13258

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2025-13258 Tenda AC20 WifiExtraSet buffer overflow

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used...

Tenda AC20 安全漏洞

Tenda AC20 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC20 version 16.03.08.12 and earlier, which stems from an incorrect operation of the parameter wpapskcrypto in the file /goform/WifiExtraSet, which may result in a buffer overflow...

PT-2025-47105

Name of the Vulnerable Software and Affected Versions Tenda AC20 versions up to 16.03.08.12 Description A buffer overflow exists in the Tenda AC20 router. The issue is located in an unknown function within the /goform/WifiExtraSet file. Manipulation of the wpapsk crypto argument can trigger the...

Information Disclosure

github.com/rancher/rancher is vulnerable to Information Disclosure. The vulnerability is due to improper handling of Impersonate-Extra- headers, which are sent to external entities via the /meta/proxy endpoint, allowing an attacker to access identifiable or sensitive information such as email...

EUVD-2025-99080

Malicious code in extrarodentz3n npm...

EUVD-2025-92102

Malicious code in extramarsupialz3n npm...

EUVD-2025-92103

Malicious code in extraleechz3n npm...

Malicious code in extra_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1e32e185de61518c2cd1cd5600fc5c3286f8e3dc3f53cedbb76309cf7c508a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d9359433375a4b45e0b6ef45164b90be8402541b45338427f927fda499b57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92101

Malicious code in extraorangutanz3n npm...

MAL-2025-113782 Malicious code in extra_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1e32e185de61518c2cd1cd5600fc5c3286f8e3dc3f53cedbb76309cf7c508a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Remote Code Execution (RCE)

cn.hutool, hutool-extra is vulnerable to remote code execution RCE. The vulnerability is due to improper expression handling in the QLExpressEngine class, which allows an attacker to execute arbitrary expressions leading to arbitrary method invocation and potential remote code execution...

EUVD-2025-76893

Malicious code in extraguppy-silentdev npm...

EUVD-2025-71579

Malicious code in extracardinalz3n npm...

Malicious code in extra_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ef4963064b2065827642c7747e0f8328c7f6e257125760bf092cbe345179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64149

Malicious code in extrasilverfishrequirement npm...

MAL-2025-94405 Malicious code in extra_silverfish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb8f3fd61435fdc21f19a00fa70ad49063715e606ebeb926af82b263b223f13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a05037ad9d93eb481d53f78f6a3e29011a5de7e31bfafedb0691fab295595e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...