CVE-2025-59372

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

Path Traversal

clearml is vulnerable to Path Traversal. The vulnerability is due to improper handling of symbolic and hard links in the safeextract function, which allows an attacker to write files outside the intended directory and potentially achieve remote code execution...

MAL-2025-191465 Malicious code in mcp-polymarket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c93eadc60da9cb188762b7190a7c6b48a5eaa9766f23d7515b944c05eb3f005 The package mcp-polymarket was found to contain malicious code. Source: ghsa-malware 41eb8c2fd8bee675d7893ba16ddd2f6fd03730818520e928c0320ed2a0306602...

CVE-2025-59372

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

CVE-2025-59372

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

CVE-2025-59372

Summary: CVE-2025-59372 is a path-traversal vulnerability in ASUS Router Firmware. An authenticated, remote attacker could write files outside the intended directory, potentially compromising device integrity. Documents consistently describe this flaw as affecting ASUS Router devices and referenc...

EUVD-2025-199557

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

CVE-2025-59372

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

Malicious code in @clausehq/flows-step-mqtt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55586de02f72931159b200d06ceacff4a40d50ee20e753335fffab62df93608c The package @clausehq/flows-step-mqtt was found to contain malicious code. Source: ghsa-malware...

PT-2025-48022

Name of the Vulnerable Software and Affected Versions ASUS Router Firmware affected versions not specified Description A path traversal vulnerability exists in certain router models. A remote, authenticated attacker could exploit this to write files outside the intended directory, potentially...

Malicious code in @freeday-ai/webchat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83e58d7d44e29e5ff1bbf1fde3e4796cb2a04716c72ccd63d1e9d5c98b5054e The package @freeday-ai/webchat was found to contain malicious code. Source: ghsa-malware...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal due to unsafe path handling. An attacker can access, overwrite, or delete files outside the intended directories by supplying specially crafted names or archive entries containing path traversal sequences...

Malicious code in react-native-jam-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4651dd576f405b8b0d0fd7724638dce527ed7cec18cdfc20e4b49f5cc3f9006d The package react-native-jam-icons was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/slot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00107e442d452bcb43403d89ade38e4fb111f1d1624b2dc4d2498df1f9a6ca2 The package @oku-ui/slot was found to contain malicious code. Source: ghsa-malware 2a90589b3706323fe3b284df0f3935425b573427c0e51600a8c59a2fc69a670d A...

MAL-2025-191110 Malicious code in inmaa-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a71a1334fb3a18076752ed1d28b6fa7cc43dc4f4b612d102624e00dcdf53cb The package inmaa-map was found to contain malicious code. Source: ghsa-malware 56eac0e53cd10844280484abbd6456539bce6cd1e970a33a3707d49612ac8a88 Any...

Malicious code in bidirectional-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9232b33b143ce14e500ddb0d725a5b646a180ad4bd7dbf1fc8890baefdd22f95 The package bidirectional-adapter was found to contain malicious code. Source: ghsa-malware...

Malicious code in automation_model (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1926379efdd9fddb153965f44070e510b81ea958a611dc7b2fafb891b856f35c The package automationmodel was found to contain malicious code. Source: ghsa-malware b6b4ab86b995aa30207899784d17feba68bd397866ebb733d0de222eeb2a4c1...

Malicious code in flatten-unflatten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96678bbed20be5d500dc65bda769b41f7d3666a18c8a76262aca5ed79ef584fd The package flatten-unflatten was found to contain malicious code. Source: ghsa-malware...

Malicious code in medusa-plugin-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11d8b0e347690c78b45c790ef5d54f7cadf6d5d2fa89a86ef6c1765ab136f The package medusa-plugin-logs was found to contain malicious code. Source: ghsa-malware...

Malicious code in lang-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7644eb22af82aaf1aeebcd8954139ce3dc9b43a0db43be02605ee10037e3f75 The package lang-codes was found to contain malicious code. Source: ghsa-malware 80738e6b29d50856453735fa6d92a27222eb3def027ae81195eb7555e076f7df Any...