CVE-2026-77053

The boneIO Black firmware is vulnerable to missing authentication, where the management web API listens on all network interfaces and exposes all endpoints without requiring credentials. An unauthenticated remote attacker can fully control the device, leading to denial of service , configuration ...

MAL-2025-178353 Malicious code in rusd-setya-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d41fc4d8cdc92dfbcd581e3bc4aca03f4132e16262650d97442a7e1af5ee84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...