CVE-2025-60700

A command injection vulnerability exists in the D-Link DIR-882 Router firmware (version DIR882A1_FW102B02 ) within the prog.cgi and librcm.so binaries. The root cause is a lack of input sanitization where the sub_4455BC function in prog.cgi stores user-supplied SetDMZSettings/IPAddress values in ...

CVE-2025-60672

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDynamicDNSSettings' functionality, where the 'ServerAddress' and 'Hostname' parameters in prog.cgi are stored in NVRAM and later used by rc to...

CVE-2025-60676

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetNetworkSettings' functionality of prog.cgi, where the 'IPAddress' and 'SubnetMask' parameters are directly concatenated into shell commands executed...

DEBIAN-CVE-2025-40182

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

CVE-2025-40182

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

CVE-2025-40182

Technical details for CVE-2025-40182 are not provided in the supplied documents. The initial description mentions a kernel crypto skcipher reqsize handling issue, but no vendor/version specifics or remediation are included here. Monitor for updated advisories.

CVE-2025-40182 crypto: skcipher - Fix reqsize handling

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

EUVD-2025-136964

Malicious code in rusdi-set-ru npm...

EUVD-2025-136962

Malicious code in rusdi-set-rus npm...

EUVD-2025-136966

Malicious code in rusdi-set-nutru npm...

EUVD-2025-136956

Malicious code in rusdi-set-rusmay npm...

EUVD-2025-141618

Malicious code in rusdi-set-rusmaya npm...

EUVD-2025-136953

Malicious code in rusdi-set-rusu npm...

MAL-2025-173141 Malicious code in budi-set-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a506d084a14bfc8b02ebcd023ee60598148fe8f295aeec94fd2a10025a594c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136960

Malicious code in rusdi-set-rusm npm...

EUVD-2025-143162

Malicious code in budi-set-rusmaya npm...

Malicious code in rusdi-set-nutru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b464272cf8e2bfc3864b0613c1e83aebac54a86f50ec305bdb752804ac5482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136958

Malicious code in rusdi-set-rusma npm...

MAL-2025-178362 Malicious code in rusdi-set-rusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b46856c9f895aa1677efb4696fcf066f81fd533a70ec75d0db2eaf502c75d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-131925

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...