Wavestore VMS 6.48.809 Remote Code Execution

Wavestore VMS version 6.48.809 contains a command injection vulnerability in the venusd /simple/export endpoint. An authenticated remote attacker can inject shell commands through the user parameter, resulting in arbitrary command execution with root-equivalent privileges. The included proof of...

Wavestore VMS 6.48.809 Remote Code Execution

Wavestore VMS version 6.48.809 contains a command injection vulnerability in the venusd /simple/export endpoint. An authenticated remote attacker can inject shell metacharacters into the user parameter, which is URL-decoded and passed without sanitization to a command executed through popen...

Malware in simple-export-map

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in simple-export-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44defb42445d3a7511f32616401e72a003e6eee8f3e47cd2ca1f41b4026f65b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2280 Malicious code in simple-export-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44defb42445d3a7511f32616401e72a003e6eee8f3e47cd2ca1f41b4026f65b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...