4127 matches found
CVE-2025-10689 D-Link DIR-645 soap.cgi soapcgi_main command injection
A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgimain of the file /soap.cgi. Such manipulation of the argument service leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. This...
CVE-2025-54391
A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration ZCS allows an attacker with valid user credentials to bypass Two-Factor Authentication 2FA protection. The attacker can configure an additional 2FA method either a third-party authenticator app or email-based...
CVE-2025-54390
A Cross-Site Request Forgery CSRF vulnerability exists in the ResetPasswordRequest operation of Zimbra Collaboration ZCS when the zimbraFeatureResetPasswordStatus attribute is enabled. An attacker can exploit this by tricking an authenticated user into visiting a malicious webpage that silently...
CVE-2025-54390
Zimbra Collaboration (ZCS) CVE-2025-54390 is a CSRF in ResetPasswordRequest when zimbraFeatureResetPasswordStatus is enabled. An attacker can trick an authenticated user into visiting a malicious page that silently sends a crafted SOAP request to reset the user’s password due to missing CSRF toke...
PT-2025-38678
Name of the Vulnerable Software and Affected Versions D-Link DCS-935L versions prior to 1.13.01 Description A stack-based buffer overflow issue exists in the sub 402280 function of the /HNAP1/ file. The issue is due to the manipulation of the HNAP AUTH/SOAPAction argument, which can allow a remot...
Malicious code in rollup-janus-dotenv-soap (npm)
The package rollup-janus-dotenv-soap was found to contain malicious code...
Malicious code in quark-markdown-soap-jekyll (npm)
The package quark-markdown-soap-jekyll was found to contain malicious code...
MAL-2025-44647 Malicious code in hugo-xenos-soap-deneb (npm)
The package hugo-xenos-soap-deneb was found to contain malicious code...
Malicious code in soap-socketio-taurus-async (npm)
The package soap-socketio-taurus-async was found to contain malicious code...
Malicious code in janus-vuepress-arcturus-soap (npm)
The package janus-vuepress-arcturus-soap was found to contain malicious code...
MAL-2025-44759 Malicious code in janus-vuepress-arcturus-soap (npm)
The package janus-vuepress-arcturus-soap was found to contain malicious code...
MAL-2025-45901 Malicious code in rollup-janus-dotenv-soap (npm)
The package rollup-janus-dotenv-soap was found to contain malicious code...
Malicious code in soap-commitlint-config-angular-adonis-cors (npm)
The package soap-commitlint-config-angular-adonis-cors was found to contain malicious code...
Malicious code in antares-native-ablation-soap (npm)
The package antares-native-ablation-soap was found to contain malicious code...
MAL-2025-45720 Malicious code in quark-markdown-soap-jekyll (npm)
The package quark-markdown-soap-jekyll was found to contain malicious code...
MAL-2025-46099 Malicious code in soap-commitlint-config-angular-adonis-cors (npm)
The package soap-commitlint-config-angular-adonis-cors was found to contain malicious code...
MAL-2025-44230 Malicious code in farout-adonis-tool-soap (npm)
The package farout-adonis-tool-soap was found to contain malicious code...
MAL-2025-46239 Malicious code in tardigrade-kinetic-soap-cassini (npm)
The package tardigrade-kinetic-soap-cassini was found to contain malicious code...