MAL-2025-46505 Malicious code in vera-lontong48-breki (npm)

The package vera-lontong48-breki was found to contain malicious code...

Malicious code in vera-rojak80-breki (npm)

The package vera-rojak80-breki was found to contain malicious code...

Malicious code in vera-telur1-breki (npm)

The package vera-telur1-breki was found to contain malicious code...

MAL-2025-46506 Malicious code in vera-lutis72-breki (npm)

The package vera-lutis72-breki was found to contain malicious code...

MAL-2025-46503 Malicious code in vera-ketan59-breki (npm)

The package vera-ketan59-breki was found to contain malicious code...

MAL-2025-46507 Malicious code in vera-lutis72-kyuki (npm)

The package vera-lutis72-kyuki was found to contain malicious code...

MAL-2025-46502 Malicious code in vera-gembus14-kyuki (npm)

The package vera-gembus14-kyuki was found to contain malicious code...

MAL-2025-46501 Malicious code in vera-gaplek51-kyuki (npm)

The package vera-gaplek51-kyuki was found to contain malicious code...

MAL-2025-46509 Malicious code in vera-telur1-breki (npm)

The package vera-telur1-breki was found to contain malicious code...

MAL-2025-46504 Malicious code in vera-lontong40-breki (npm)

The package vera-lontong40-breki was found to contain malicious code...

MAL-2025-46508 Malicious code in vera-rojak80-breki (npm)

The package vera-rojak80-breki was found to contain malicious code...

Malicious code in vera-rangginang21-breki (npm)

The package vera-rangginang21-breki was found to contain malicious code...

MAL-2025-38224 Malicious code in vera-rangginang21-breki (npm)

The package vera-rangginang21-breki was found to contain malicious code...

Malicious code in vera-tomat54-breki (npm)

The package vera-tomat54-breki was found to contain malicious code...

MAL-2025-38225 Malicious code in vera-tomat54-breki (npm)

The package vera-tomat54-breki was found to contain malicious code...

CVE-2019-15498

cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --output argument injection in the username parameter to /cgi-bin/cmh/webcam.sh...

CVE-2019-13598

LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port3480/datarequest because the "No unsafe lua allowed" code block is skipped...

CVE-2019-15123

The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site...

VulnCheck KEV: CVE-2024-57968

Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to unintended folders via upload.apsx...

vera-haueisen.de Improper Access Control vulnerability OBB-3780365

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...