[SECURITY] [DLA 4168-2] openafs regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4168-2 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 08, 2025 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 42 Update: tcpreplay-4.5.2-1.fc42

Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay supports pcap tcpdump and snoop capture formats. Also included, is tcpprep a tool to pre-process capture files to allow increased performance under certain conditions as well as capinfo which provides basic information...

Exploit for CVE-2017-0143

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features - Free one id Multi-target web netcat for reverse shell - What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。re...

MAL-2025-44908 Malicious code in kssd-vol1-basic (npm)

The package kssd-vol1-basic was found to contain malicious code...

Malicious code in kssd-vol1-basic (npm)

The package kssd-vol1-basic was found to contain malicious code...

Tenda AC8 formWifiBasicSet function buffer overflow vulnerability

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. A buffer overflow vulnerability exists in the Tenda AC8, which is caused by the formWifiBasicSet function failing to correctly...

CVE-2025-58872: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.This issue affects Simple Price Calculator: from n/a through = 1.3...

DXPLOIT1_ScannerTools

It is an offensive tool for system scanning and pentesting. The...

RabbitMQ Node can log Basic Auth header from an HTTP request

...

CVE-2025-55852

Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security5g...

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

PT-2025-35775

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.06 Description: The Tenda AC8 version 16.03.34.06 is susceptible to a buffer overflow issue in the formWifiBasicSet function. The vulnerability is triggered through the security or security 5g parameter...

Seiko Solutions SkyBridge BASIC MB-A130 vulnerable to OS command injection

Overview SkyBridge BASIC MB-A130 provided by Seiko Solutions Inc. contains the following vulnerability. OS command injection CWE-78 - CVE-2025-54857 Tsutomu Aramaki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

CVE-2025-54857

CVE-2025-54857 affects SkyBridge BASIC MB-A130 versions prior to 1.5.8 (i.e., 1.5.8 and earlier). The issue is an OS command injection caused by improper neutralization of special elements, allowing a remote unauthenticated attacker to execute arbitrary OS commands with root privileges. The trust...

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

CVE-2025-54857: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

Seikou202fSolutions SkyBridge BASIC MB-A130: Operating System Command Injection Vulnerability

The Seikou202fSolutions SkyBridge BASIC MB-A130 is a wireless router from Seikou202fSolutions, Japan. An operating system command injection vulnerability exists in Seikou202fSolutions SkyBridge BASIC MB-A130 version 1.5.8 and earlier, which stems from OS command injection and could lead to the...

PT-2025-35457

Name of the Vulnerable Software and Affected Versions SkyBridge BASIC MB-A130 versions prior to 1.5.8 Description Improper neutralization of special elements used in an OS command 'OS Command Injection' exists in the software. If exploited, a remote unauthenticated attacker may execute arbitrary ...