Ruijie X30 PRO security vulnerabilities

Ruijie X30 PRO is a home wireless router from China's Ruijie Ruijie. A security vulnerability exists in the Ruijie X30 PRO that stems from improper handling of a specially crafted POST request for pwdmodify in the file /usr/lib/lua/luci/modules/common.lua, which could result in the execution of...

PT-2025-50677

Name of the Vulnerable Software and Affected Versions Ruijie X30-PRO version X30-PRO-V1 09241521 Description An OS Command Injection issue exists in Ruijie X30-PRO version X30-PRO-V1 09241521. Attackers can execute arbitrary commands by sending a specially crafted POST request to the pwdmodify...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a lack of bounds checking in GetTachyonCommand in tachyonservercommon.h, which could lead to local elevation of privilege...

CVE-2025-56108

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

PT-2025-50689

Name of the Vulnerable Software and Affected Versions Ruijie RG-BCR RG-BCR600W affected versions not specified Description An issue exists that allows attackers to execute arbitrary commands. This can be triggered by sending a specially crafted POST request to the get wanobj function within the...

PT-2025-50672

Name of the Vulnerable Software and Affected Versions Ruijie RG-YST AP versions 3.01B11P280YST250F Description An OS Command Injection issue exists in Ruijie RG-YST AP. An attacker can execute arbitrary commands by sending a specially crafted POST request to the /usr/lib/lua/luci/modules/common.l...

CVE-2025-56113

An OS Command Injection vulnerability exists in the Ruijie RG-YST wireless bridge series (specifically models RG-YST EST and YSTAP_3.0(1)B11P280YST250F ) running versions V1.xxV2.xx . The root cause is the mishandling of a specially crafted POST request to the pwdmodify function located in the fi...

PT-2025-50716

Name of the Vulnerable Software and Affected Versions Tachyon Server affected versions not specified Description The GetTachyonCommand function within tachyon server common.h contains a potential out-of-bounds write condition resulting from an integer overflow. Successful exploitation of this iss...

CVE-2025-62470

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-34418

creationtimestamp| type| source ---|---|--- 2025-12-10 17:25:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7nlcmtoh62c...

BELL-CVE-2023-53790

Bulletin has no description...

Malicious code in mws-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1ca345fe8bb8298e9adc0920dea67d420dd5c57f79004c058df12bc365f016 The package mws-common-ui was found to contain malicious code. Source: ghsa-malware 935da08d8dffad1e28679a7043038425705e76dff3808c50361e8a67d02c55f8...

MAL-2025-192433 Malicious code in mws-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1ca345fe8bb8298e9adc0920dea67d420dd5c57f79004c058df12bc365f016 The package mws-common-ui was found to contain malicious code. Source: ghsa-malware 935da08d8dffad1e28679a7043038425705e76dff3808c50361e8a67d02c55f8...

EUVD-2025-202418

Malicious code in mws-common-ui npm...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.6, <=1.4.11), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.5, <=1.4.11) +49 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-authz-policy-common (>=2.0.0.cr1, <=26.4.7)

org.keycloak:keycloak-authz-policy-common MAVEN version =2.0.0.cr1, =1.2.6, =1.2.5, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =2.5.6-24.0, =0.1.0, =8.1, =1.0.0, =1.1.0 and more Source cves: CVE-2025-14082 Source advisory:...

BELL-CVE-2023-53862

Bulletin has no description...

BELL-CVE-2023-53854

Bulletin has no description...

CVE-2023-53794

In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2reconnectserver, because it will be released soon. Note that the exiting session will stay in server-smbseslist until i...

EUVD-2025-202366

Malicious code in ddp-common npm...

Malicious Package

Overview ddp-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...