552 matches found
CVE-2025-63221
The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...
CVE-2025-63221
The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...
PT-2025-47469
The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...
Malicious code in inland-apricot-puma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fd8eb906ddac610a69eb7dd65b6527d2b36d32a2342a31b1fb2da4eb773edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tired-pink-puma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21223ebc4b925a1c5bd80e1e7a30662c0864466865d1c85a8fe8e2a210e12cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117022
Malicious code in tired-pink-puma npm...
EUVD-2025-117299
Malicious code in inland-apricot-puma npm...
MAL-2025-138803 Malicious code in inland-apricot-puma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fd8eb906ddac610a69eb7dd65b6527d2b36d32a2342a31b1fb2da4eb773edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139080 Malicious code in tired-pink-puma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21223ebc4b925a1c5bd80e1e7a30662c0864466865d1c85a8fe8e2a210e12cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-131867 Malicious code in academic_puma_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb674e560b519a06a52e266bc7192a3fd8858e66953a8de0b5e6a758bb4ba31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cuddly_puma_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a4809c288b6c58824ee8e23e6c4f271edbdf54f9bf334e660fd201a41217cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92048
Malicious code in faithfulpumaz3n npm...
EUVD-2025-92637
Malicious code in cuddlypumaz3n npm...
MAL-2025-102949 Malicious code in front_puma_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ececb52bf9813e0a9b17d9e875b93a13997f022ae0aab5f3ff613a5d1c28d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in puma_pink-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4db39401ab1964b13e7e2a8a03c7af49370696001302a529fff1bc6f7827cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in explicit_puma_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e0a1bce5fa885dc34adf2e0fe8d27ba1fc4b46b14084bfba3c5fc9a1e0a601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55994
Malicious code in adjacent-plum-puma npm...
EUVD-2025-52895
Malicious code in organisational-coffee-puma npm...
Malicious code in extraordinary-olive-puma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc311838723124740e2a8476e735e604f7b8caf5e44e63af763927b1263e8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...