EUVD-2025-199123

Malicious code in m25-transaction-utils npm...

Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191127 Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2022-51581

Malicious code in bioql PyPI...

CVE-2022-4221

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...

CVE-2022-4221

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...

Command injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...

CVE-2022-4221

CVE-2022-4221 concerns ASUS NAS-M25 prior to 1.0.1.7, where an improper neutralization of special elements in OS commands allows an unauthenticated attacker to inject commands via unsanitized cookie values. Affected component is the OS command execution path tied to cookie handling. Documented im...

CVE-2022-4221 OS command injection in ASUS M25 NAS

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...

PT-2022-26313 · Asus · Asus Nas-M25

Name of the Vulnerable Software and Affected Versions: Asus NAS-M25 versions through 1.0.1.7 Description: The issue is related to an improper neutralization of special elements used in an OS command, allowing an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie value...

Default CORS config allows any origin with credentials

Impact Origin reflection attack The default CORS configuration is vulnerable to an origin reflection attack. Take the following http4s app app, using the default CORS config, running at https://vulnerable.example.com: scala val routes: HttpRoutesF = HttpRoutes.of case req if req.pathInfo ===...

Unauthorized Access Vulnerability in MOBOTIX M25

MOBOTIX is a world-renowned leader in network camera technology and has been producing pure megapixel cameras for many years and is ranked as the global market leader. MOBOTIX M25 suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...