CVE-2025-59097 Unauthenticated SOAP API in dormakaba access manager

The exos 9300 application can be used to configure Access Managers e.g. 92xx, 9230 and 9290. The configuration is done in a graphical user interface on the dormakaba exos server. As soon as the save button is clicked in exos 9300, the whole configuration is sent to the selected Access Manager via...

ZTE MF258K Pro Configuration Flaw Vulnerability

The ZTE MF258K Pro is a 4G outdoor bridge kit from ZTE China. The ZTE MF258K Pro suffers from a configuration flaw vulnerability that stems from improperly set directory permissions, which can be exploited by an attacker to cause a write operation to be performed...

Huawei HarmonyOS Configuration Flaw Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A configuration flaw vulnerability exists in Huawei HarmonyOS, which stems from a configuration flaw in the file management module, and can be exploited by a...

CVE-2025-11779

CVE-2025-11779 affects Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. A stack-based buffer overflow in the SetLan function is triggered when applying a new configuration via the management web interface (index.cgi). Un-sanitised configuration parameters can lead to command injection. Publicly referenced ...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A configuration flaw vulnerability exists in Huawei HarmonyOS, which stems from a configuration flaw in the file management module, and can be exploited by a...

CVE-2025-52263

CVE-2025-52263 affects Startcharge Artemis AC Charger (7-22 kW, v1.0.4) in its Web Configuration module. The issue allows authenticated network-adjacent attackers to upload crafted firmware, enabling arbitrary code execution. Public and vendor advisories reference this vulnerability across multip...

EUVD-2017-9473

Malware in sbrugna...

EUVD-2014-3590

Malware in sbrugna...

EUVD-2019-2218

Malware in sbrugna...

EUVD-2017-3366

Malware in sbrugna...

EUVD-2013-6243

Malware in sbrugna...

EUVD-2020-9341

Malware in sbrugna...

EUVD-2020-4346

Malware in sbrugna...

EUVD-2011-3549

Malware in sbrugna...

EUVD-2009-3537

Malware in sbrugna...

EUVD-2022-27847

Malicious code in bioql PyPI...

EUVD-2022-28086

Malicious code in bioql PyPI...

pgjdbc: pgjdbc insecure authentication in channel binding

A connection handling flaw was found in the pgjdbc connection driver in configurations that require channel binding. Connections created with authentication methods that should not allow channel binding permit connections to use channel binding. This flaw allows attackers to position themselves i...

Linux Distros Unpatched Vulnerability : CVE-2011-4899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate,...

CVE-2025-52338

An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass authentication and compromise user accounts via a bruteforce attack...