CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Vulnerability Report : Studio 3T Remote Command Execution Overview A critical vulnerability in Studio 3T version 2025.1.0 and earlier allows a remote attacker to execute arbitrary code via a crafted payload exploiting the childprocess module in the...

3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +2415 more potentially affected by CVE-2026-118256 via vue-i18n (>=9.0.0-beta.8, <=11.4.13)

vue-i18n NPM version =9.0.0-beta.8, =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0, =0.15.0, =1.1.5 and more Source cves: CVE-2026-118256 Source advisory: OSV:GHSA-8RC2-428Q-7WW3...

3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +1710 more potentially affected by CVE-2025-53892 +1 more via vue-i18n (9.14.5)

vue-i18n NPM version 9.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on vue-i18n and may be impacted: - 3h1-ui =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0, =0.15.0, =1.1.5 and mo...

3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +1892 more potentially affected by CVE-2025-53892 +1 more via @intlify/shared (9.14.5)

@intlify/shared NPM version 9.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on @intlify/shared and may be impacted: - 3h1-ui =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =0.0.11, =2.0.0-dev.838f140, =3.0.1, =0.1.0,...

3h1-ui (>=1.0.46, <=3.0.0-next.266), 3t-ui (>=0.0.7, <=0.0.9) +2415 more potentially affected by CVE-2026-118256 via vue-i18n (>=9.0.0-beta.8, <=11.4.13)

vue-i18n NPM version =9.0.0-beta.8, =1.0.46, =0.0.7, =0.5.0, =0.0.0, =0.0.0, =0.1.9, =0.0.292, =0.0.292, =0.0.237, =2.0.0-dev.838f140, =3.0.1, =0.1.0, =0.15.0, =1.1.5 and more Source cves: CVE-2026-118256 Source advisory: MEND:CVE-2026-118256...

EUVD-2017-14721

Malware in sbrugna...

EUVD-2017-14723

Malware in sbrugna...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

Studio 3T security vulnerabilities

Studio 3T is a native cross-platform MongoDB management tool open-sourced by Studio 3T. A security vulnerability exists in Studio 3T 2025.1.0 and earlier versions, which stems from improper handling of a specially crafted payload by the childprocess module and could lead to arbitrary code executi...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

PT-2025-33035 · Studio 3T · Studio 3T

Name of the Vulnerable Software and Affected Versions: Studio 3T versions prior to 2025.1.1 Description: An issue allows a remote attacker to execute arbitrary code via a crafted payload to the child process module. Recommendations: Update to version 2025.1.1 or later...

CVE-2025-52385: Improper Control of Generation of Code

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2021-26262

Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

@3t-transform/threeteeui (>=1.5.1, <=2.0.0-3tx-reskin.166), @accelbyte/sdk-legal (>=0.0.0-dev-20240828032938, <=6.0.2) +293 more potentially affected by CVE-2024-45801 via dompurify (>=3.0.0, <=3.1.2)

dompurify NPM version =3.0.0, =1.5.1, =0.0.0-dev-20240828032938, =0.2.8-experimental.0, =1.2.0, =6.4.10, =5.1.1, =1.0.22, =1.0.12, =1.0.0, =1.0.22, =1.0.25, =0.0.1, =0.0.0-nightly-2021101222132, =0.9.4 and more Source cves: CVE-2024-45801 Source advisory: MEND:CVE-2024-45801...

Philips MRI 1.5T and 3T (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.2 ATTENTION: Low attack complexity Vendor: Philips Equipment: MRI 1.5T and 3T Vulnerabilities: Improper Access Control, Incorrect Ownership Assignment, Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of these...

CVE-2021-42744

Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

Code injection

Philips MRI 1.5T and MRI 3T Version 5.x.x does not restrict or incorrectly restricts access to a resource from an unauthorized actor...

CVE-2021-26248

CVE-2021-26248 affects Philips MRI 1.5T and MRI 3T (Version 5.x.x). The vulnerability is an Incorrect Ownership Assignment (CWE-708) where a resource is assigned to an owner outside the intended control sphere, enabling improper access control. The incident is documented with a CVSS v3 base score...