CVE-2025-9962

CVE-2025-9962 describes an unauthenticated buffer overflow in the Novakon P series (P – V2001.A.C518o2) that allows root privileges to be gained without authentication. The current connected documents do not indicate a remediation patch or version containing a fix; one source notes there is no in...

CVE-2025-9962 Unauthenticated Buffer Overflow

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operating pages from Taiwan, China-based Novakon Corporation. A security vulnerability exists in Novakon P series version V2001.A.C518o2, which stems from a path traversal flaw that could lead to root file system exposure and arbitrary file...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operation pages from the Taiwan, China based company Novakon. A security vulnerability exists in the Novakon P series version V2001.A.C518o2, which stems from a failure to set a root user password, which could result in a physical attacker gaini...

PT-2025-39165

Name of the Vulnerable Software and Affected Versions Novakon P series version P – V2001.A.C518o2 Description A default or missing password for the root user allows physical attackers to easily access the console. This impacts the Novakon P series devices. Recommendations Set a strong password fo...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operating pages from Taiwan, China-based Speedcom Novakon. A security vulnerability exists in Novakon P series version V2001.A.C518o2, which stems from improper authentication and could allow an unauthenticated attacker to upload and download...

PT-2025-39167

Name of the Vulnerable Software and Affected Versions Novakon P series versions prior to V2001.A.C518o2 Description A flaw in privilege management within Novakon P series devices allows attackers to obtain root privileges if a single service is compromised. This impacts industrial environments an...

PT-2025-39163

Name of the Vulnerable Software and Affected Versions Novakon P series version P – V2001.A.C518o2 Description A path traversal issue exists in Novakon P series that can expose the root file system "/" and allow modification of all files with root permissions, potentially leading to system...

PT-2025-39162

Name of the Vulnerable Software and Affected Versions Novakon P series version V2001.A.C518o2 Description A buffer overflow exists in Novakon P series. Successful exploitation allows attackers to obtain root permission without authentication. Recommendations At the moment, there is no information...

PT-2025-39166

Name of the Vulnerable Software and Affected Versions Novakon P series versions P – V2001.A.C518o2 Description An improper authentication issue exists in Novakon P series devices. This allows unauthenticated attackers to upload and download applications to and from the device. Recommendations At...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operation pages from Taiwan, China-based Novakon. A security vulnerability exists in the Novakon P series version V2001.A.C518o2, which stems from the presence of a buffer overflow that could allow an unauthenticated attacker to gain root...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operation pages from Taiwan, China-based Speedcom Novakon. A security vulnerability exists in the Novakon P series version V2001.A.C518o2, which stems from improper privilege management and could allow an attacker to gain root privileges...

MAL-2025-43085 Malicious code in @zalastax/nolb-_trivikr-test_p (npm)

The package @zalastax/nolb-trivikr-testp was found to contain malicious code...

Malicious code in @zalastax/nolb-_trivikr-test_p (npm)

The package @zalastax/nolb-trivikr-testp was found to contain malicious code...

9p: add missing locking around taking dentry fid list

...

CVE-2025-9692

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

CVE-2025-9692

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

CVE-2025-9692

CVE-2025-9692 affects Campcodes Online Shopping System 1.0. The vulnerability is an SQL injection in /product.php via the p parameter. The attack can be performed remotely, and public exploit details exist. No patch/version fix information is provided in the supplied documents; remediation status...

CVE-2025-9692 Campcodes Online Shopping System product.php sql injection

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

Security Bulletin: Timing Side-Channel in PPC64LE Assembly Leaks Bits of Secret Scalars in P-256 Operations, which affects IBM watsonx.data

Summary Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the...