CVE-2025-10461

The CVE-2025-10461 affects Softing Industrial Automation GmbH smartLinks running in Docker (filesystem modules), where improper URL checks enable global file reads. Affected versions: smartLink SW-HT up to 1.42 and smartLink SW-PN up to 1.03. Root cause is insufficient URL validation allowing acc...

CVE-2025-10685 HTTP POST with specific higher content length leads into heap corruption

Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT Webserver modules allows overflow buffers.This issue affects: smartLink SW-PN: through 1.03 smartLink SW-HT: through 1.42...

CVE-2025-10685: Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT Webserver modules allows overflow buffers.This issue affects: smartLink SW-PN: through 1.03 smartLink SW-HT: through 1.42...

Siemens多款产品 资源管理错误漏洞

Siemens SIMATIC ET 200AL and others are products of Siemens, Germany.Siemens SIMATIC ET 200AL is a distributed I/O system module.Siemens SIMATIC ET 200MP is a modular I/O system module for use in control cabinets for high-density channel applications. Siemens SIMATIC ET 200SP is a distributed I/O...

CVE-2022-50708 HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: fix potential resource leak in ssippnopen ssippnopen claims the HSI client's port with hsiclaimport. When hsiregisterportevent gets some error and returns a negetive value, the HSI client's port should be releas...

CVE-2022-50708 HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: fix potential resource leak in ssippnopen ssippnopen claims the HSI client's port with hsiclaimport. When hsiregisterportevent gets some error and returns a negetive value, the HSI client's port should be releas...

CVE-2022-50708

The CVE-2022-50708 entry concerns the Linux kernel: HSI ssi_protocol in ssip_pn_open() may leak resources if hsi_register_port_event() fails after hsi_claim_port(). The fix is explicit: release the HSI client port with hsi_release_port() when hsi_register_port_event() errors. Public details acros...

CVE-2025-66575

VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to inject commands and run as LocalSyst...

CVE-2025-10150

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

SmartLink HW-PN和SmartLink HW-DP 安全漏洞

SmartLink HW-PN and SmartLink HW-DP are both edge gateway products for industrial automation from SmartLink USA. A security vulnerability exists in SmartLink HW-PN version 1.03 and earlier and SmartLink HW-DP version 1.31, which stems from a scan of TCP port 80 could cause the web server to crash...

SmartLink HW-PN和SmartLink HW-DP 安全漏洞

SmartLink HW-PN and SmartLink HW-DP are both edge gateway products for industrial automation from SmartLink USA. A security vulnerability exists in SmartLink HW-PN version 1.03 and earlier and SmartLink HW-DP version 1.31, which stems from improper locking and could result in a memory or resource...

EUVD-2007-1140

Malware in sbrugna...

EUVD-2000-1170

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986463 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: fix use-after-free in CCMP/GCMP RX When PN checking is done in mac80211, for...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986408)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986408 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: fix use-after-free in CCMP/GCMP RX When PN checking is done in mac80211, for...

MAL-2025-13200 Malicious code in @zalastax/nolb-pn (npm)

The package @zalastax/nolb-pn was found to contain malicious code...

MAL-2025-13720 Malicious code in @zalastax/nolb-react-pn (npm)

The package @zalastax/nolb-react-pn was found to contain malicious code...

Malicious code in @zalastax/nolb-pn (npm)

The package @zalastax/nolb-pn was found to contain malicious code...

Malicious code in pn-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6788e4d94901987d6b643edd5ac4d70be5b436465250b943c7d9793895d061c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2698 Malicious code in pn-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6788e4d94901987d6b643edd5ac4d70be5b436465250b943c7d9793895d061c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...