3286 matches found
CVE-2025-64325
CVE-2025-64325 affects Emby Server prior to versions 4.8.1.0 and 4.9.0.0-beta. A malicious user can send an authentication request with a manipulated X-Emby-Client header that is added to the devices section of the admin dashboard without sanitization. The issue has been patched in version 4.8.1....
CVE-2025-64325 Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard
Emby Server is a personal media server. Prior to version 4.8.1.0 and prior to Beta version 4.9.0.0-beta, a malicious user can send an authentication request with a manipulated X-Emby-Client value, which gets added to the devices section of the admin dashboard without sanitization. This issue has...
Emby Server 安全漏洞
Emby Server is a powerful media server for individual developers. The product can be used primarily for integrated multimedia editing such as video audio and photos. A security vulnerability exists in Emby Server versions prior to 4.8.1.0 and prior to 4.9.0.0-beta, which stems from an uncleaned...
PT-2025-47414
Name of the Vulnerable Software and Affected Versions Emby Server versions prior to 4.8.1.0 Emby Server versions prior to 4.9.0.0-beta Description Emby Server is a personal media server. A malicious user can send an authentication request with a manipulated X-Emby-Client value. This value is adde...
D-Link DIR-816L 安全漏洞
The DIR-816L is a wireless router device from D-Link. A stack-based buffer overflow vulnerability exists in the D-Link DIR-816L version 206b09beta, which stems from the genacgimain function in the gena.cgi file improperly handling the SERVERID/HTTPSID parameter. An attacker could use this...
CVE-2025-13188
CVE-2025-13188 affects D-Link DIR-816L (firmware 2_06_b09_beta). The flaw is in the authenticationcgi_main function of /authentication.cgi; manipulating the Password argument triggers a stack-based buffer overflow, enabling remote code execution. Public exploit exists; impact is high (remote, no ...
EUVD-2025-179683
Malicious code in cold-hot-beta-log-daemon npm...
EUVD-2025-175884
Malicious code in tree-awk-notify-beta-cloud npm...
EUVD-2025-177460
Malicious code in omicron-short-water-easy-beta npm...
EUVD-2025-180103
Malicious code in beta-enum-notify-view-stack npm...
EUVD-2025-176184
Malicious code in string-beta-benchmark-scale-file npm...
Malicious code in beta-moon-fast-authorize-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176055
Malicious code in tau-mu-good-beta-kappa npm...
EUVD-2025-180102
Malicious code in beta-error-rho-authenticate-tree npm...
EUVD-2025-180101
Malicious code in beta-grep-cron-omega-validate npm...
EUVD-2025-179093
Malicious code in epsilon-catch-cold-beta-new npm...
EUVD-2025-176952
Malicious code in proxy-cache-beta-iota-water npm...
EUVD-2025-175399
Malicious code in zeta-beta-secure-secure-load npm...