CVE-2025-13797 ADSLR B-QE2W401 send_order.cgi parameterdel_swifimac command injection

A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdelswifimac of the file /sendorder.cgi. Performing manipulation of the argument delswifimac results in command injection. The attack is possible to be carried out remotely. The exploit is...

CVE-2025-13797 ADSLR B-QE2W401 send_order.cgi parameterdel_swifimac command injection

A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdelswifimac of the file /sendorder.cgi. Performing manipulation of the argument delswifimac results in command injection. The attack is possible to be carried out remotely. The exploit is...

CVE-2025-13797

The CVE-2025-13797 issue affects ADSLR B-QE2W401 (version 250814-r037c). The vulnerable component is the function parameter del_swifimac in /send_order.cgi, where manipulation enables remote command injection. Exploitation is publicly available and vendor has not responded. No specific patch/vers...

ADSLR B-QE2W401 安全漏洞

The ADSLR B-QE2W401 is a wireless router from China's Flying Fish Star ADSLR. A security vulnerability exists in ADSLR B-QE2W401 version 250814-r037c, which stems from the incorrect operation of the parameter delswifimac in the file /sendorder.cgi, which could lead to command injection...

PT-2025-48547

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

CVE-2025-13797: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdelswifimac of the file /sendorder.cgi. Performing manipulation of the argument delswifimac results in command injection. The attack is possible to be carried out remotely. The exploit is...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which originates from a cross-site request forgery in CkEditorAdminController...

PT-2025-48400

Name of the Vulnerable Software and Affected Versions ADSLR B-QE2W401 version 250814-r037c Description A command injection issue exists in ADSLR B-QE2W401 250814-r037c. Manipulation of the del swifimac parameter within the /send order.cgi file can lead to command execution. This attack can be...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which originates from a server-side request forgery in the SimpleAiAdminController chat interface...

CVE-2025-61167

SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opaccss/ajaxselector.php component via the id and datas parameters...

CVE-2025-66110: Missing Authorization

Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tiktok Feed: from n/a through = 1.0.23...

EUVD-2025-143167

Malicious code in budi-memeq-b npm...

EUVD-2025-139405

Malicious code in nuilva-vmiam-b npm...

CVE-2025-32091

Incorrect default permissions in some firmware for the IntelR ArcTM B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

Malicious code in masako-b-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f765ae98ea33e70b51a5a92f6e8c0b6f1292c1671739c78b147ad047ad2df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160141 Malicious code in masako-b-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f765ae98ea33e70b51a5a92f6e8c0b6f1292c1671739c78b147ad047ad2df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146357

Malicious code in verify-tactiva-b npm...

MAL-2025-170455 Malicious code in verify-tactiva-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18dd10afe38eeee503688d156fc5b44122c9e0f58bd246e9bb44658d75f6633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18dd10afe38eeee503688d156fc5b44122c9e0f58bd246e9bb44658d75f6633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...