4032 matches found
CVE-2025-55055
CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2025-55055
CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
HSEC-2023-0011 git-annex GPG decryption attack via compromised remote
git-annex GPG decryption attack via compromised remote A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user's GPG key. This attack could be used to expose encrypted data that was never stored in git-annex. Daniel Dent discovered this...
HSEC-2023-0010 git-annex private data exfiltration to compromised remote
git-annex private data exfiltration to compromised remote Some uses of git-annex were vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN. Joey He...
Sony NCP-HG100 操作系统命令注入漏洞
The Sony NCP-HG100 is a webcam from Sony Japan. An operating system command injection vulnerability exists in Sony NCP-HG100 version 1.4.48.16 and earlier, which stems from improper neutralization of a special element and can lead to remote command execution...
EUVD-2025-117076
Malicious code in special-brown-bobcat npm...
EUVD-2025-117077
Malicious code in special-blush-firefly npm...
EUVD-2025-102115
Malicious code in specialbarracudaz3n npm...
EUVD-2025-94949
Malicious code in specialhedgehogz3n npm...
EUVD-2025-74214
Malicious code in specialslugorange-76 npm...
EUVD-2025-75576
Malicious code in specialmammal-apptea npm...
EUVD-2025-84187
Malicious code in specialslugz3n npm...
EUVD-2025-73589
Malicious code in specialfoxz3n npm...
EUVD-2025-73590
Malicious code in special-lavender-loon npm...
EUVD-2025-51899
Malicious code in special-chocolate-partridge npm...
EUVD-2025-51896
Malicious code in special-yellow-hookworm npm...
EUVD-2025-51897
Malicious code in special-maroon-gibbon npm...
Malicious code in special-yellow-hookworm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4806075a97830de22dd5f0815ac9dd71c27c68733d6895ad9937efadbc541aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...