13389 matches found
TOTOLINK X15 安全漏洞
TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability, which originates from the failure of the file /boafrm/formSaveConfig parameter submit-url to correctly validate the length and size of the input data ...
Malicious code in stake-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505bc2ea5f7bcdaeafd338ab86be15a36425335f5d45c1b2d5d03d43068ab07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4704 Malicious code in stake-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505bc2ea5f7bcdaeafd338ab86be15a36425335f5d45c1b2d5d03d43068ab07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in service-config-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40822518b54e1e34955d491e8ede52f50b7da5e2146715795dade573b232ec10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in portfolio-config-manager-mongo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7313dd72cd35e9b2cc754bd7b41842071deb31b3be1bef658e61241e6bca17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4692 Malicious code in portfolio-config-manager-mongo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7313dd72cd35e9b2cc754bd7b41842071deb31b3be1bef658e61241e6bca17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4652 Malicious code in phlib-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a4915ab271cda053c8653639ad5f83905fae202cf8b9fbe4123e86db9b87911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in phlib-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a4915ab271cda053c8653639ad5f83905fae202cf8b9fbe4123e86db9b87911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Uncontrolled Search Path Element
Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element due to the shared %PROGRAMDATA% directory being searched for configuration files. An attacker can introduce unintended behavior and affect other users by creating malicious configuration files in the...
CVE-2025-30167 Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration...
CVE-2025-48046
An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint...
Debian dla-4193 : linux-config-6.1 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4193 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4193-1 [email protected]...
ISC Kea 代码注入漏洞
ISC Kea is a modern open source DHCPv4 and DHCPv6 server from the ISC organization. A security vulnerability exists in ISC Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8, which stems from configuration and API directives that can load malicious hook libraries,...
PT-2025-23080 · Johnson Controls · Istar Config Utility
Name of the Vulnerable Software and Affected Versions: Johnson Controls' iSTAR Config Utility versions prior to 6.9.5 Description: A memory leak flaw in the iSTAR Config Utility could lead to data leaks, potentially exposing sensitive information. The issue affects versions prior to 6.9.5. Updati...
Malicious code in vite-config-pretty-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3f6b7466ad8fab94eb697f86931898faaaa7437f3361c93556cfae5f75f99f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4517 Malicious code in vite-config-pretty-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3f6b7466ad8fab94eb697f86931898faaaa7437f3361c93556cfae5f75f99f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-5159
A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue affects the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely. The exploit has...
CVE-2024-48911
OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and...
CVE-2024-52792
LDAP Account Manager LAM is a php webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In affected versions LAM does not properly sanitize configuration values, that are set via mainmanage.php and confmain.php. This allows setting arbitrary config values...