CVE-2023-7304 Ruijie RG-UAC nmc_sync.php Command Injection

Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmcsync.php' interface. An unauthenticated attacker able to reach the affected endpoint can inject shell commands via crafted request data, causing the application to execute arbitrary commands on the...

Malicious code in akasearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1075d10450cfce61ccff3b97a9b8bf18a7be1d286b307dbff6e0018768baa4da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in private-callout-queue (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7962ea070e8c6d0dc03b62736d3b83c52ac2367d2f5949252c86fa295aac63b2 Any computer that has this package installed or running should be considered...

Malicious code in graphorbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e39cb6a782c7394e47a516577dd7696fc2db73d710cdd07e5ceec3dbc46c7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48326 Malicious code in internallib_v190 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75787b9471cecb41a09915fbec6bf00bf40073c0f2da3ad342ee9fb1c83a366c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48336 Malicious code in mad-1.2.8.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f458f275324cf68bed67b3ae284456b3688dfd9634450c5a03f39552352ea625 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48318 Malicious code in nodelog-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3f1413a6184e042f68d9e0cee79523ea3c0566535bb56e1e0b13370875fd8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8809c0049ae5c8b8cd198cb99abd3b33d600799607d44fc77777f9b0a711eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @evo-tech/backoffice-test-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931d6e176eaebf4b172dba6fd81800d7257f741ffad464c014dc9fcd085bcba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48273 Malicious code in buyingflow-core-nav-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b6cc0a729e266013937adc920cee3c7c57f6c4ef99bb5d08cc79e3e0ee9163 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tw-webkit-universal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fbf2c831086ca3205f21c4113b6b26c6a3a854dcf9b56b72683b10995a7fe43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-outcome-error-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf316b6e96271df51ad30f147aa205bb372c306b2a929a854bafb68c41a5cf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-10.2.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edbba59677096ba6cb6e726feac84ffde07fbf44a251eaafd0502902b914b5f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3j-io-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adbbd3bde158787db574505a858f13ea34575b68e5b097210afebd82fd57aa73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2016-15047

AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The exefile parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke...

MAL-2025-48167 Malicious code in redirect-h4y8f0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 342a11d68c5ef3714b27d79e47c72e09fdb618597bad0d12e7b92fa393acb158 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48141 Malicious code in redirect-b9fv9e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46cbcba4fe58767d339f5ce87331ecf27d07989348ee1cd876592fac0f8678c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48157 Malicious code in redirect-ewce43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d3a83cfe9df44f0743b065c4c13d3e28fb674fdd00d29200036c53697af96ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-1st7z7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 638828fbe37e3987211d30f184858e313c2d97580599b67ec562cd00ce90d942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-mrdlde (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 170742d09410096f98512248795c7ad4022ab55a7d5494833f8c12584bc1598d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...