NUUO Camera - Unauthenticated OS Command Injection (CVE-2025-1338)

NUUO camera firmware up to 20250203 is vulnerable to unauthenticated OS command injection via the log parameter of /handleconfig.php. Command output is returned in the HTTP response. Opens an execute session for interactive command execution. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO came...

Malicious code in @ks-openclaw/kim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a563317f01b921a7425ae16f740c8fa729db03087afacfea903db3dd90e15803 The package's preinstall lifecycle script preinstall.js opens a TCP socket to the hardcoded remote host 120.55.170.103:8888, spawns cmd.exe, and pipe...

Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

Palo Alto Networks has shared remediation guidance for a recently disclosed critical security flaw impacting PAN-OS that has come under active exploitation. The vulnerability, tracked as CVE-2024-3400 CVSS score: 10.0, could be weaponized to obtain unauthenticated remote shell command execution o...