Tenda’s various products have vulnerabilities related to trust management.

Tenda i24 and others are products of Tenda, a Chinese company. tenda i24 is a wireless router. tenda 4G03 is a wireless router tenda 4G05 is a wireless router. A trust management issue vulnerability exists in various Tenda products.The vulnerability stems from incorrect operation of the Shadow Fi...

CVE-2025-15371: Use of Hard-coded Credentials

A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. T...

Penetration Testing of Agentic AI: A Comparative Security Analysis across Models and Frameworks

Agentic AI introduces security vulnerabilities that traditional LLM safeguards fail to address. Although recent work by Unit 42 at Palo Alto Networks demonstrated that ChatGPT-4o successfully executes attacks as an agent that it refuses in chat mode, there is no comparative analysis in multiple...

nova-act (>=2.3.18.0, <=3.1.18.0) potentially affected by unknown CVE via strands-agents (1.14.0)

strands-agents PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on strands-agents and may be impacted: - nova-act =2.3.18.0, =3.1.18.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-STRANDSAGENTS-14157238...

Malicious code in nova-angular-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1edbc661355ab22d5857395431ed8c7eb4bd73b77e1080a8cdb5ad1c386a8e The package nova-angular-project was found to contain malicious code...

EUVD-2025-200048

Malicious code in nova-angular-project npm...

MAL-2025-191521 Malicious code in nova-angular-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1edbc661355ab22d5857395431ed8c7eb4bd73b77e1080a8cdb5ad1c386a8e The package nova-angular-project was found to contain malicious code...

TencentOS Server 4: openstack-glance (TSSA-2025:0076)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0076 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2025-179022

Malicious code in ethology-paleontology-nova-archaeoastronomy npm...

Malicious code in bulma-equinox-build-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936f198e0e70f653d369a2d4c68b7759255a33a0397ab6045251c30465cc7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177524

Malicious code in nova-sagitta-pegasus-hermes npm...

EUVD-2025-177200

Malicious code in phoenix-apollo-nextjs-nova npm...

EUVD-2025-176923

Malicious code in publish-nova-helios-restart npm...

EUVD-2025-176850

Malicious code in quark-postcss-soap-nova npm...

EUVD-2025-176255

Malicious code in speleology-phenomic-nova-resonance npm...

EUVD-2025-177529

Malicious code in nova-ini-greatfilter-hawkingradiation npm...

EUVD-2025-177526

Malicious code in nova-quantum-protractor-commitlint npm...

EUVD-2025-177525

Malicious code in nova-relay-cosmogenic-taurus npm...

EUVD-2025-178660

Malicious code in greatfilter-nova-morgan-private npm...

Malicious code in yakutsk-luna-nova-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247a887e7b5c2f9fd964d4f486657e8b0b2f0cb3db19d32b6971e95515ac6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...