CVE-2025-63221

The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...

CVE-2025-63221

The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...

CVE-2025-63221

The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...

PT-2025-47469

The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...

CVE-2025-63221

The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...

CVE-2025-63221: Improper Access Control

The Axel Technology puma devices firmware versions 0.8.5 to 1.0.3 are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system...

Axel PUMA 安全漏洞

Axel PUMA is an FM re-broadcast receiver and IP encoder device from Axel Italy. A security vulnerability exists in Axel PUMA versions 0.8.5 through 1.0.3, which stems from a lack of authentication in the /cgi-bin/gstFcgi.fcgi endpoint, and could lead to a complete crack of the device...

CVE-2025-63221

The Axel Technology puma devices (firmware versions 0.8.5 to 1.0.3 ) are vulnerable to Broken Access Control due to a lack of authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can exploit this flaw to list user accounts, create new administrative users, delete...

Malicious code in tired-pink-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21223ebc4b925a1c5bd80e1e7a30662c0864466865d1c85a8fe8e2a210e12cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138803 Malicious code in inland-apricot-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fd8eb906ddac610a69eb7dd65b6527d2b36d32a2342a31b1fb2da4eb773edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117022

Malicious code in tired-pink-puma npm...

EUVD-2025-117299

Malicious code in inland-apricot-puma npm...

Malicious code in inland-apricot-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fd8eb906ddac610a69eb7dd65b6527d2b36d32a2342a31b1fb2da4eb773edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139080 Malicious code in tired-pink-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21223ebc4b925a1c5bd80e1e7a30662c0864466865d1c85a8fe8e2a210e12cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131867 Malicious code in academic_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb674e560b519a06a52e266bc7192a3fd8858e66953a8de0b5e6a758bb4ba31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a4809c288b6c58824ee8e23e6c4f271edbdf54f9bf334e660fd201a41217cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92048

Malicious code in faithfulpumaz3n npm...

EUVD-2025-92637

Malicious code in cuddlypumaz3n npm...

MAL-2025-102949 Malicious code in front_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ececb52bf9813e0a9b17d9e875b93a13997f022ae0aab5f3ff613a5d1c28d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puma_pink-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4db39401ab1964b13e7e2a8a03c7af49370696001302a529fff1bc6f7827cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...