CVE-2026-36828

CVE-2026-36828 describes a command-injection in Panabit PAP-XM320 up to v7.7. The vulnerable CGI is /cgi-bin/tools/ajax_cmd; when authenticated users supply action=runcmd, they can execute arbitrary shell commands with root privileges. Impact aligns with high-severity, full control over the host ...

CVE-2026-36827

The vulnerability CVE-2026-36827 affects Panabit PAP-XM320 (up to v7.7). The web management interface calls /usr/sbin/pappiw with user-controlled inputs and uses unsafe eval for argument processing, enabling command injection. An authenticated remote attacker with access to the management UI coul...

Malicious Package

Overview pap-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

EUVD-2014-6266

Malware in sbrugna...

synacktiv-rules

synacktiv-rules Public repository of Sigma and YARA/YARA-X ru...

Malicious code in pap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4edb2994647fd7463cbdc117574cc9d7b34a7c03f581ceadeabf96b60cc791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11062 Malicious code in pap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4edb2994647fd7463cbdc117574cc9d7b34a7c03f581ceadeabf96b60cc791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pap-rn-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d93d68f0c91cc33781ef291ad6e9060b27ee9050d4e4c6c4f7e5348eabef3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10765 Malicious code in pap-rn-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d93d68f0c91cc33781ef291ad6e9060b27ee9050d4e4c6c4f7e5348eabef3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MGASA-2024-0264 Updated freeradius packages fix security vulnerability

This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...

Updated freeradius packages fix security vulnerability

This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...

Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool

Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 CVSS score: 9.3, the vulnerability has been described as a case of missing authentication in its...

PAN-OS: CHAP and PAP When Used with RADIUS Authentication Lead to Privilege Escalation

This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...

Malicious code in pap-events (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2835 Malicious code in pap-events (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pap-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aedde58db0099dc4a2595977fd29ec7682a84f55c56bee218753a6a340a6b2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2834 Malicious code in pap-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aedde58db0099dc4a2595977fd29ec7682a84f55c56bee218753a6a340a6b2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2014-2015

Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...

freeradius security and bug fix update

3.0.13-15 - Fixes EAP-PWD: DoS issues due to multithreaded BNCTX access Resolves: bz1818808 3.0.13-14 - Fixes receiving of multiple RADIUS packets under load Resolves: bz1630684 3.0.13-13 - Fixes logging of cleartext pap password Resolves: bz1677435 3.0.13-12 - Fixes paircompare with attribute...

DEBIAN-CVE-2017-9103

An issue was discovered in adns before 1.5.2. papmailbox822 does not properly check st from adnsfindlabelnext. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling progra...