MAL-2025-48401 Malicious code in supplychain-firewall-benchmark-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19af5203b034f6420f173bf6e45719afeb28ecfe359a8858cbe814fe3cd55d11 The OpenSSF Package Analysis project identified 'supplychain-firewall-benchmark-hello' @ 1.10.2 npm as malicious. It is considered malicious...

CVE-2025-11188 CVE-2025-11188

The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database...

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions via the process responsible for executing system commands. An attacker can execute arbitrary commands on the server by sending crafted requests after authentication. Remediation A fix was pushed...

CVE-2025-47338

Memory corruption while processing escape commands from userspace...

CVE-2025-21065

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

CVE-2025-21065

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

EUVD-2025-33668

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

CVE-2025-21065

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

CVE-2025-21065

The issue CVE-2025-21065 affects Samsung Retail Mode prior to version 5.59.11. The root cause is improper input validation in Retail Mode, enabling a local attacker to execute privileged commands on their own device. The affected component is Retail Mode (Samsung), with the vulnerability triggere...

PT-2025-41525

Name of the Vulnerable Software and Affected Versions Retail Mode versions prior to 5.59.11 Description A flaw exists in input validation within Retail Mode. This allows a local attacker to execute privileged commands on their own device. Recommendations Update Retail Mode to version 5.59.11 or...

SAMSUNG Retail Mode 安全漏洞

SAMSUNG Retail Mode is a demo mode application from Samsung South Korea. A security vulnerability exists in SAMSUNG Retail Mode versions prior to 5.59.11, which stems from improper input validation and could allow an attacker to execute privileged commands on an owned device...

CVE-2025-21065: Undefined Security Weakness

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

EUVD-2025-33583

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...

CVE-2025-4615

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...

CVE-2025-4615

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...

EUVD-2025-33373

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Space Node Setting fields that, when visited by another user, enable the attacker to execute commands with the target...

EUVD-2025-33368

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Archive Log screen that, when visited by another user, enables the attacker to execute commands with the target's...

CVE-2025-4615 PAN-OS: Improper Neutralization of Input in the Management Web Interface

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...

CVE-2025-59998

Summary: CVE-2025-59998 affects Juniper Networks Junos Space versions prior to 24.1R4, due to an improper neutralization of input during web page generation that enables cross-site scripting on the Archive Log screen. An attacker can inject script tags; when another user visits the affected page,...

CVE-2025-59993 Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Space Node Setting fields that, when visited by another user, enable the attacker to execute commands with the target...