4067 matches found
CVE-2025-63932
CVE-2025-63932 affects the D-Link Router DIR-868L (A1, FW106KRb01.bin). The cgibin HNAP service does not filter the HTTP SOAPAction header, enabling an unauthenticated remote code execution via shell command execution. Red Hat, ENISA EUVD, CIRCL, NVD, and CVE listings corroborate an unauthenticat...
CVE-2025-9312
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
CVE-2025-9312
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
EUVD-2025-197988
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
CVE-2025-9312 Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
CVE-2025-9312 Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
CVE-2025-9312
CVE-2025-9312 relates to a missing authentication enforcement in WSO2 products’ mTLS implementation used by System REST APIs and SOAP services. The root cause is improper validation of client certificate–based authentication under certain default configurations, allowing unauthenticated requests ...
PT-2025-47304
Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A missing authentication enforcement issue exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services. Improper validation of client certificate–based...
PT-2025-47046
Name of the Vulnerable Software and Affected Versions D-Link DIR-816L version 2 06 b09 beta Description A stack-based buffer overflow exists in the soapcgi main function of the /soap.cgi file. This issue allows for remote exploitation. The exploit has been publicly disclosed. The affected product...
EUVD-2025-177879
Malicious code in metabolomics-octans-soap-membrane npm...
EUVD-2025-176606
Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin npm...
EUVD-2025-178990
Malicious code in exec-supernova-soap-mongoose npm...
EUVD-2025-178854
Malicious code in fornax-castor-saturnology-soap npm...
EUVD-2025-178318
Malicious code in jabbah-umbriel-io-soap npm...
EUVD-2025-175852
Malicious code in uglify-js-buffer-exosphere-soap npm...
EUVD-2025-176318
Malicious code in soap-odin-config-sails npm...
EUVD-2025-176324
Malicious code in soap-auth0-tailwindcss-convict npm...
EUVD-2025-176190
Malicious code in stream-janus-soap-juno npm...
Malicious code in stream-janus-soap-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0748be6aaa678054ffec1227c9412d1378a7a4ce501ac61fd6eab94006e013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...