The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to the PostgreSQL database.

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the PostgreSQL database...

Malicious Package

Overview time-server-analyzer is a malicious package. This package contains malicious code intended to exfiltrate data, and its contents have been removed from the official package manager. Although it appears to be a time-related utility, its main function is to collect system information and se...

Siemens SINEC Traffic Analyzer Multiple Vulnerabilities

SINEC Traffic Analyzer is a network management tool provided by Siemens for network traffic monitoring, performance analysis and troubleshooting. The tool supports the configuration and management of industrial network devices such as SCALANCE and RUGGEDCOM, helping users to optimize network...

Malicious code in analyzer-importer (npm)

The package analyzer-importer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in custom-property-analyzer (npm)

The package custom-property-analyzer was found to contain malicious code...

Malicious code in nr1-browser-analyzer (npm)

The package nr1-browser-analyzer was found to contain malicious code...

Malicious code in threaddump-analyzer (npm)

The package threaddump-analyzer was found to contain malicious code...

MAL-2025-14476 Malicious code in analyzer-importer (npm)

The package analyzer-importer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-36838 Malicious code in threaddump-analyzer (npm)

The package threaddump-analyzer was found to contain malicious code...

MAL-2025-27858 Malicious code in nr1-browser-analyzer (npm)

The package nr1-browser-analyzer was found to contain malicious code...

MAL-2025-17835 Malicious code in custom-property-analyzer (npm)

The package custom-property-analyzer was found to contain malicious code...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-40769

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V3.0. The affected application uses a Content Security Policy that allows unsafe script execution methods. This could allow an attacker to execute unauthorized scripts, potentially leading to cross-site...

CVE-2025-40770

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions. The affected application uses a monitoring interface that is not operating in a strictly passive mode. This could allow an attacker to interact with the interface, leading to man-in-the-middle attacks...

CVE-2025-40766

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V3.0. The affected application runs docker containers without adequate resource and security limitations. This could allow an attacker to perform a denial-of-service DoS attack...

CVE-2025-26398

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle MITM attack against users. This vulnerability requires additional software not installed by default, local access to the server and...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20048

CVE-2025-20048 affects Intel® Trace Analyzer and Collector software (all versions). The vulnerability is an uncontrolled search path that could allow an authenticated, low-privilege user to escalate privileges via local access. Multiple sources (Intel advisory INTEL-SA-01266 and Nessus/NVD refere...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...