MAL-2025-181050 Malicious code in teate-thy-sonic-viom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f542f144012d40c01cf10d57bedbd159dc656db36f97cd8a83f041ea369574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2023-38404

The XPRTLD web application in Veritas InfoScale Operations Manager VIOM before 8.0.0.410 allows an authenticated attacker to upload all types of files to the server. An authenticated attacker can then execute the malicious file to perform command execution on the remote server...

CVE-2023-38404

The CVE-2023-38404 issue affects Veritas InfoScale Operations Manager (VIOM) prior to 8.0.0.410, specifically the XPRTLD web application. An authenticated attacker can upload arbitrary files to the server and then execute them to achieve command execution on the remote host. This is characterized...

CVE-2023-32569

The CVE-2023-32569 entry affects Veritas InfoScale Operations Manager (VIOM). The VIOM web application contains a SQL Injection flaw in certain areas that can be exploited to execute arbitrary SQL commands on the back-end database, leading to creation/reading/updating/deleting of sensitive data. ...

CVE-2023-32568

An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2.800 and 8.x before 8.0.410. The VIOM web application does not validate user-supplied data and appends it to OS commands and internal binaries used by the application. An attacker with root/administrator level...

CVE-2023-32568

An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2.800 and 8.x before 8.0.410. The VIOM web application does not validate user-supplied data and appends it to OS commands and internal binaries used by the application. An attacker with root/administrator level...

CVE-2023-32568

CVE-2023-32568: Veritas InfoScale Operations Manager (VIOM) affects VIOM before 7.4.2.800 and 8.x before 8.0.410. The web application does not validate user-supplied data and appends it to OS commands and internal binaries, enabling an attacker with root/administrator privileges to read sensitive...

CVE-2022-26484

Veritas InfoScale Operations Manager (VIOM) is affected by CVE-2022-26484. The issue is a directory traversal vulnerability in the web server’s admin/cgi-bin/rulemgr.pl/getfile/ path, enabling a remote authenticated administrator to read arbitrary files on the system by manipulating resource name...

CVE-2022-26483

Veritas InfoScale Operations Manager (VIOM) is affected by CVE-2022-26483. A reflected cross-site scripting (XSS) vulnerability exists in admin/cgi-bin/listdir.pl that allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP GET parameter due to insufficient ...