SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution

SEOWON INTECH SLC-130 and SLR-120S devices allow remote code execution via the ipAddr parameter to the systemlog.cgi page. id: CVE-2020-17456 info: name: SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution author: gy741,edoardottt severity: critical description: SEOWON INTECH...

Human Factors in Cybersecurity in Icelandic Small and Medium-Sized Enterprises

Cybersecurity threats are increasing in all aspects of society due to the integration of digital systems into modern-day life and a volatile geo-political landscape. Technical factors are an ongoing arms race; however, the threat surface from human and social factors is still present, often...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in navigations in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to bypass content security policy through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 129. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 130...

CVE-2026-26931

Memory Allocation with Excessive Size Value CWE-789 in the Prometheus remotewrite HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation CAPEC-130...

CVE-2026-2493

creationtimestamp| type| source ---|---|--- 2026-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-130/...

Malicious code in elf-stats-caroling-sparkler-130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0273bb7532f6cdf1c7cc333611b00034deb3cf79207f3b76d63a0e748b7672a5 The package elf-stats-caroling-sparkler-130 was found to contain malicious code...

EUVD-2025-202827

Malicious code in elf-stats-caroling-sparkler-130 npm...

MAL-2025-192482 Malicious code in elf-stats-caroling-sparkler-130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0273bb7532f6cdf1c7cc333611b00034deb3cf79207f3b76d63a0e748b7672a5 The package elf-stats-caroling-sparkler-130 was found to contain malicious code...

One newsletter to rule them all

Welcome to this week's edition of the Threat Source newsletter. " It's a dangerous business, going out your door. You step onto the road, and if you don't keep your feet, there's no knowing where you might be swept off to." -- Bilbo Baggins It's almost the end of the year, which feels like the...

Malicious code in elf-stats-snowdusted-stocking-130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35a3b0c2505733f6c54c5b9d41c151216d3ce8d057decff61aa1ed778bbad86 The package elf-stats-snowdusted-stocking-130 was found to contain malicious code...

MAL-2025-192142 Malicious code in elf-stats-snowdusted-stocking-130 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35a3b0c2505733f6c54c5b9d41c151216d3ce8d057decff61aa1ed778bbad86 The package elf-stats-snowdusted-stocking-130 was found to contain malicious code...

EUVD-2025-25676

Malicious code in bioql PyPI...

CVE-2025-58272

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed...

CVE-2025-58272

CVE-2025-58272 affects Web Caster V130 firmware versions 1.08 and earlier. The issue is a CSRF (CWE-352) that can cause a logged-in user, who visits a malicious page, to have product settings unintentionally changed. Documentation from multiple sources confirms the affected product and impact. Th...

PT-2025-35676

Name of the Vulnerable Software and Affected Versions: Web Caster V130 versions 1.08 and earlier Description: A cross-site request forgery issue exists that allows an attacker to potentially modify product settings if a logged-in user views a malicious page. Recommendations: Update Web Caster V13...

Linux Distros Unpatched Vulnerability : CVE-2024-8387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that...

Linux Distros Unpatched Vulnerability : CVE-2024-8386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack...

CVE-2023-3097

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been rated as critical. This issue affects the function setMainSource. The manipulation leads to os command injection. Local access is required to approach this attack. The exploit has been disclosed to the public...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Elliptic module

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Elliptic module Vulnerability Details CVEID:CVE-2024-42461 DESCRIPTION: Node.js Elliptic module could allow a remote attacker to obtain sensitive information, caused by a flaw with BER-encoded signatures are allowed. By...