MAL-2026-4714 Malicious code in wdb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05323f987b64131618be124040867a2acb216aef96952a6a3dfc11c615501500 package.json declares "preinstall": "./dist/runtime.node", causing npm to spawn the shipped file as an executable on every install on Linux. Despite...

Malicious code in wdb-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the packag...

MAL-2026-4713 Malicious code in wdb-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the packag...

CVE-2026-25772

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

CVE-2026-25772

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

PT-2026-25925

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.4.0 through 4.14.2 Description Wazuh is a free and open source platform used for threat prevention, detection, and response. A stack-based buffer overflow exists in the Wazuh Database synchronization module wdb delta event.c...

clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in cli_bm_addpatt

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4514655573966848 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadWDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=5137273091850240 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadWDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7e6d5971a060 Crash State: parseregex parsereg...

clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in add_hash

Detailed Report: https://oss-fuzz.com/testcase?key=6510977513029632 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000003b3 Crash State: addhash loadregexmatcher...

clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=6157029266554880 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadWDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff3890d260 Crash State: parseregex parsereg...

clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in cli_bm_addpatt

Detailed Report: https://oss-fuzz.com/testcase?key=5271728031137792 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000001017 Crash State: clibmaddpatt addhash...

clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in load_regex_matcher

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4580711766556672 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=5057643943690240 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000004201 Crash State: parseregex parseregex parseregex...

CVE-2021-31793

An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...

CVE-2021-31793

An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...

Code injection

An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...

CVE-2021-31793

The connected Red Hat and NVD records confirm CVE-2021-31793 affects NightOwl WDB-20-V2 devices (model: WDB-20-V2_20190314). A web server on port 80 can be accessed by unauthenticated users, enabling retrieval of snapshots and video streams via the /snapshot URI. The issue is described as an unau...

CVE-2021-31793

An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...

PT-2021-19510

Name of the Vulnerable Software and Affected Versions NightOwl WDB-20-V2 version WDB-20-V2 20190314 Description The issue allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated us...

CVE-2021-31793: Missing Authentication for Critical Function

An issue exists on NightOwl WDB-20-V2 WDB-20-V220190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via th...