546 matches found
CVE-2015-10145
Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/runcommands.sh. The application fails to properly restrict or validate input supplied via the 'commands' parameter, allowing an authenticated attacker to execute arbitrary she...
AVideo 安全漏洞
AVideo is an open source broadcast network creation tool from World Wide Broadcast Network. A security vulnerability exists in AVideo versions prior to 20.0, which stems from multiple public API endpoints leaking absolute filesystem paths, potentially exposing the underlying filesystem structure...
CVE-2025-41692 Weak/Predictable root Password
A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm...
EUVD-2025-101253
Malicious code in underlyingaardvarkz3n npm...
EUVD-2025-88211
Malicious code in underlyinggoosez3n npm...
EUVD-2025-74131
Malicious code in underlyingcrabmaroon-89 npm...
EUVD-2025-78043
Malicious code in underlyingjellyfishz3n npm...
EUVD-2025-73175
Malicious code in underlyingturtlez3n npm...
EUVD-2025-73179
Malicious code in underlyingkoiz3n npm...
EUVD-2025-73177
Malicious code in underlyingpiranhaz3n npm...
EUVD-2025-73176
Malicious code in underlyingstingrayz3n npm...
EUVD-2025-73178
Malicious code in underlyinglemurz3n npm...
EUVD-2025-51394
Malicious code in underlying-azure-cheetah npm...
EUVD-2025-51390
Malicious code in underlying-turquoise-cobra npm...
EUVD-2025-51392
Malicious code in underlying-emerald-hummingbird npm...
EUVD-2025-51391
Malicious code in underlying-fuchsia-wren npm...
EUVD-2025-51395
Malicious code in underlying-amethyst-weasel npm...
EUVD-2025-51393
Malicious code in underlying-bronze-camel npm...
MAL-2025-71259 Malicious code in underlying-turquoise-cobra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393d35f31afa9f857e7a41fdf1ed879f9a7a43575a9b717f0bd01c285f566a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...