152 matches found
Malicious code in wt-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2d85a0a81bf32d87da2b57522113cf28e122344c75d7055ea5d5116d63f61e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2008-2521
Malware in sbrugna...
EUVD-2010-1302
Malware in sbrugna...
EUVD-2010-1303
Malware in sbrugna...
Malicious code in react-wt-jquery-and-css (npm)
The package react-wt-jquery-and-css was found to contain malicious code...
MAL-2025-31865 Malicious code in react-wt-jquery-and-css (npm)
The package react-wt-jquery-and-css was found to contain malicious code...
aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by CVE-2025-53643 via aiohttp (0.22.5)
aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: CVE-2025-53643 Source advisory: OSV:GHSA-9548-QRRJ-X5PJ...
jhttpd Subroutine Command Execution
The vulnerability of the sub456DE8 function in the jhttpd web server of the D-Link DI-500WF-WT router microprogramming system is related to the lack of data cleaning measures at the control level when processing the cmd parameter. Exploiting this vulnerability allows an attacker to execute...
CVE-2025-5492
A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub456DE8 of the file /mspinfo.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack...
CVE-2025-5492
A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub456DE8 of the file /mspinfo.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack...
CVE-2025-5492
Summary: CVE-2025-5492 affects D-Link DI-500WF-WT up to 20250511. The flaw is in /usr/sbin/jhttpd, within the function sub_456DE8 of /msp_info.htm?flag=cmd, where manipulating the cmd parameter enables remote command injection. Several sources confirm the impact and vulnerable endpoint; exploitat...
CVE-2025-5492 D-Link DI-500WF-WT /usr/sbin/jhttpd msp_info.htm sub_456DE8 command injection
A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub456DE8 of the file /mspinfo.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack...
CVE-2025-5492 D-Link DI-500WF-WT /usr/sbin/jhttpd msp_info.htm sub_456DE8 command injection
A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub456DE8 of the file /mspinfo.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack...
CVE-2025-5492: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub456DE8 of the file /mspinfo.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack...
CVE-2010-1273
Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of 1 form values and 2 JSignal arguments, which has unspecified impact and remote attack vectors...
Malicious code in wt-fe-buz-utilities-url (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wt-fe-buz-business-stoplimit (npm)
--- -= Per source details. Do not edit below this line.=-...
aio-tinder (>=0.1.1, <=0.1.3), muffin (0.9.0) +3 more potentially affected by CVE-2024-52304 via aiohttp (0.22.5)
aiohttp PYPI version 0.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - aio-tinder =0.1.1, =0.0.3, =0.1.0, =0.4.0 Source cves: CVE-2024-52304 Source advisory: OSV:GHSA-8495-4G3G-X7PR...
wt:fuzz-eval: Heap-double-free in basic_string.tcc
Project: https://github.com/emweb/wt.git Detailed Report: https://oss-fuzz.com/testcase?key=4829565027942400 Project: wt Fuzzing Engine: libFuzzer Fuzz Target: fuzz-eval Job Type: libfuzzerasanwt Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x503000000b50 Crash State:...
wt:fuzz-eval: Crash in LLVMFuzzerRunDriver
Detailed Report: https://oss-fuzz.com/testcase?key=4506830829584384 Project: wt Fuzzing Engine: afl Fuzz Target: fuzz-eval Job Type: aflasanwt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5240000c8010 Crash State: LLVMFuzzerRunDriver Sanitizer: address ASAN Recommended Security...