4084 matches found
MAL-2025-42194 Malicious code in @com-delta-omnichannel/core (npm)
The package @com-delta-omnichannel/core was found to contain malicious code...
Malicious code in @com-delta-idp/core (npm)
The package @com-delta-idp/core was found to contain malicious code...
MAL-2025-42193 Malicious code in @com-delta-idp/core (npm)
The package @com-delta-idp/core was found to contain malicious code...
DeepDiff 安全漏洞
DeepDiff is a Python library by the individual developer Sep Dehpour. A security vulnerability exists in DeepDiff 8.6.0 and earlier versions, which stems from Delta class prototype contamination and could lead to denial of service and remote code execution...
CISA Releases Five Industrial Control Systems Advisories
CISA released five Industrial Control Systems ICS advisories on September 4, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-247-01 Honeywell OneWireless Wireless Device Manager WDM ICSA-25-217-01 Mitsubishi...
Delta Electronics DIAView Security Bypass Vulnerability
Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. A security bypass vulnerability exists in Delta Electronics DIAView, which can be exploited by attackers to cause authentication bypass...
Class Pollution
Overview deepdiff is a Deep Difference and Search of any Python object/data. Recreate objects by adding adding deltas to each other. Affected versions of this package are vulnerable to Class Pollution via the Delta constructor and manipulation of the SAFETOIMPORT set. An attacker can execute...
GHSA-MW26-5G2V-HQW3 DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...
DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...
CVE-2025-58318
Delta Electronics DIAView has an authentication bypass vulnerability...
PT-2025-36336
Name of the Vulnerable Software and Affected Versions DeepDiff versions 5.0.0 through 8.6.0 Description DeepDiff is a Python project for deep difference and search of data. Versions 5.0.0 through 8.6.0 are susceptible to class pollution through the Delta class constructor. When combined with a...
CISA Releases Four Industrial Control Systems Advisories
CISA released four Industrial Control Systems ICS advisories on September 2, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-245-01 Delta Electronics EIP Builder ICSA-25-245-02 Fuji Electric FRENIC-Loader 4...
CVE-2025-58318
Delta Electronics DIAView has an authentication bypass vulnerability...
CVE-2025-58318 DIAView - Authentication Bypass Vulnerability
Delta Electronics DIAView has an authentication bypass vulnerability...
CVE-2025-58318
Delta Electronics DIAView is affected by CVE-2025-58318, described as an authentication bypass vulnerability. Public entries consistently reference DIAView (industrial configuration software from Delta Electronics) with a bypass issue, and the CVSS vector indicates a Local attack with Low access ...
PT-2025-35467
Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAView affected versions not specified Description: Delta Electronics DIAView has an authentication bypass issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
Delta Electronics DIAView 安全漏洞
Delta Electronics DIAView is an industrial configuration software from Delta Electronics China. A security bypass vulnerability exists in Delta Electronics DIAView, which can be exploited by attackers to cause authentication bypass...
CVE-2025-57704
Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Disclosure Vulnerability...