152 matches found
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the node exec approvals. An attacker can perform unauthorized actions by exploiting mismatched gateway and node environment configurations to execute or persis...
CVE-2025-69674
Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7P161006 Build.0333.250211 allows an attacker to execute arbitrary code via the nodemac, nodeopt, optparam, and domainblk parameters of the meshnodeconfig and domiainblkconfig modules...
CVE-2025-69674
Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7P161006 Build.0333.250211 allows an attacker to execute arbitrary code via the nodemac, nodeopt, optparam, and domainblk parameters of the meshnodeconfig and domiainblkconfig modules...
CVE-2025-69674
Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7P161006 Build.0333.250211 allows an attacker to execute arbitrary code via the nodemac, nodeopt, optparam, and domainblk parameters of the meshnodeconfig and domiainblkconfig modules...
CDATA FD614GS3-R850 安全漏洞
CDATA FD614GS3-R850 is a fiber optic network unit terminal device from the American company CDATA. The version CDATA FD614GS3-R850 V3.2.7P161006 contains a security vulnerability. This vulnerability stems from buffer overflows in the meshnodeconfig and domiainblkconfig modules, which may allow fo...
PT-2026-20863
Name of the Vulnerable Software and Affected Versions CDATA FD614GS3-R850 version 3.2.7 P161006 Build.0333.250211 Description A buffer overflow issue exists in CDATA FD614GS3-R850 version 3.2.7 P161006 Build.0333.250211. This flaw allows an attacker to potentially execute arbitrary code by...
EUVD-2025-177576
Malicious code in node-config-hexo-version-indus npm...
EUVD-2025-178911
Malicious code in filament-axios-node-config-jasmine npm...
EUVD-2025-179654
Malicious code in command-blazar-node-config-phylogenetics npm...
EUVD-2025-175792
Malicious code in upgrade-dysonswarm-node-config-got npm...
EUVD-2025-177575
Malicious code in node-config-lynx-cressida-hermes npm...
EUVD-2025-177223
Malicious code in phenomic-resolvers-node-config-postgres npm...
EUVD-2025-177571
Malicious code in node-config-pulsar-buffer-luna npm...
EUVD-2025-177572
Malicious code in node-config-private-zenobia-perseus npm...
MAL-2025-188309 Malicious code in node-config-phoenix-regulus-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d81c361ada3f219c47cdd46b1840251c77fe413829cd1bb0a4c630ac731f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177578
Malicious code in node-config-commitlint-panspermia-superposition npm...
EUVD-2025-176844
Malicious code in quasar-helmet-metabolomics-node-config npm...
EUVD-2025-177579
Malicious code in node-config-callisto-comet-eslint-plugin npm...