Malicious code in messi-urfait-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6416f099947270d1a54611600cdfb389556cdee7ade4fc5ad70ca78630aec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-tears-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda57d8a37dcd006a983068ff3a7c6e0c568177bbf384b3bfd0c2a99fefe006f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-9813

A vulnerability was identified in Tenda CH22 1.0.0.1. This issue affects the function formSetSambaConf of the file /goform/SetSambaConf. The manipulation of the argument sambauserNameSda leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available an...

CVE-2025-9813 Tenda CH22 SetSambaConf formSetSambaConf buffer overflow

A vulnerability was identified in Tenda CH22 1.0.0.1. This issue affects the function formSetSambaConf of the file /goform/SetSambaConf. The manipulation of the argument sambauserNameSda leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available an...

CVE-2024-26293: Dependency on Vulnerable Third-Party Component

The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS...

Avid’s various products have security vulnerabilities

Avid NEXIS E-series, among others, is a virtualized storage platform from Avid, USA. A security vulnerability exists in various Avid products, which stems from an unvalidated filename parameter path that could lead to an arbitrary file read attack. The following products and versions are affected...

CVE-2024-26291: Improper Authorization

An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges root/NTAUTHORITY SYSTEM by default attackers are ab...

PT-2025-11126

Name of the Vulnerable Software and Affected Versions: Avid NEXIS E-series versions prior to 2024.6.0 Avid NEXIS F-series versions prior to 2024.6.0 Avid NEXIS PRO+ versions prior to 2024.6.0 System Director Appliance SDA+ versions prior to 2024.6.0 Description: The issue is related to an Imprope...

CVE-2024-26290: Improper Input Validation

Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance SDA+ on Linux allows code execution on underlying operating system with root permissions.This issue affects Avid NEXIS...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by CVE-2025-27136 via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: CVE-2025-27136 Source advisory: SNYK:JAVA-IOGITHUBROBOTHY-9396840...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: OSV:GHSA-47QW-CCJM-9C2C...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: GHSA-47QW-CCJM-9C2C...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOGITHUBROBOTHY-9399376...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOGITHUBROBOTHY-9399367...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: GHSA-V232-254C-M6P7...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: OSV:GHSA-V232-254C-M6P7...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: GHSA-2466-4485-4PXJ...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOGITHUBROBOTHY-9399373...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by unknown CVE via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: unknown CVE Source advisory: OSV:GHSA-2466-4485-4PXJ...

io.github.robothy:local-s3-jupiter (>=1.2, <=1.20), org.sdase.commons:sda-commons-server-s3-testing (>=6.0.0-rc.1, <=7.3.7) potentially affected by CVE-2025-27136 via io.github.robothy:local-s3-rest (>=1.2, <=1.20)

io.github.robothy:local-s3-rest MAVEN version =1.2, =1.2, =6.0.0-rc.1, =7.3.7 Source cves: CVE-2025-27136 Source advisory: MEND:CVE-2025-27136...