Malicious code in mini-keyboard-release (npm)

The package mini-keyboard-release was found to contain malicious code...

MAL-2025-26426 Malicious code in mini-keyboard-release (npm)

The package mini-keyboard-release was found to contain malicious code...

Malicious code in ngx-material-keyboard (npm)

The package ngx-material-keyboard was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-38216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816...

Linux Distros Unpatched Vulnerability : CVE-2020-0431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no...

Linux Distros Unpatched Vulnerability : CVE-2020-13974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if kascii is called several times in a row, aka...

📄 Ultimate Control Receiver 1.2 Remote Code Execution

Ultimate Control Receiver version 1.2 is vulnerable to an unauthenticated remote code execution vulnerability. An attacker can exploit the keyboard input functionality over TCP to execute arbitrary system commands on the target machine without user interaction. Exploit Title: Ultimate Control...

URLCrazy Domain Name Typo Tool 0.8.2

URLCrazy is a tool that can generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage. It generates 15 types of domain variants, knows over 8000 common misspellings, supports multiple keyboard layouts, can check if a typo ...

UBUNTU-CVE-2025-38378

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletbkbdprobe In probe appletbkbdprobe a "struct appletbkbd kbd" is allocated via devmkzalloc to store touch bar keyboard related data. Later on if backlightdevicegetbyname finds...

CVE-2025-38394 HID: appletb-kbd: fix memory corruption of input_handler_list

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix memory corruption of inputhandlerlist In appletbkbdprobe an input handler is initialised and then registered with input core through inputregisterhandler. When this happens input core will add the input...

CVE-2025-38378

CVE-2025-38378 affects the Linux kernel HID path for appletb-kbd. The defect is a slab use-after-free caused when a timer (kbd->inactivity_timer) is armed after probe failure and later expires, accessing memory (kbd) that has been freed. Root cause: failure paths do not disarm the timer. Fixes...

CVE-2024-12310

A vulnerability in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of...

URLCrazy Domain Name Typo Tool 0.8.1

URLCrazy is a tool that can generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage. It generates 15 types of domain variants, knows over 8000 common misspellings, supports multiple keyboard layouts, can check if a typo ...

CVE-2024-12310 Bypass of Login Screen on Shared Kiosk Workstations

A vulnerability in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of...

CVE-2024-12310

CVE-2024-12310 concerns Imprivata Enterprise Access Management (formerly Imprivata OneSign). Connected documents confirm a vulnerability where insufficient handling of keyboard shortcuts allows bypassing the shared kiosk login screen and gaining unauthorized access to the underlying Windows syste...

CVE-2024-12310 Bypass of Login Screen on Shared Kiosk Workstations

A vulnerability in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of...

Imprivata Enterprise Access Management 授权问题漏洞

Imprivata Enterprise Access Management is an identity and access management system from Imprivata Corporation, USA. An authorization issue vulnerability exists in Imprivata Enterprise Access Management versions 5.3 through 24.2, which stems from insufficient handling of keyboard shortcuts and cou...

📄 Remote Mouse 3.303 Remote Code Execution

Remote Mouse version 3.303 macOS contains an unauthenticated remote code execution vulnerability. By sending crafted TCP packets that simulate keyboard input, an attacker can remotely open a terminal and execute arbitrary commands, enabling full system compromise. Exploit Title: Remote Mouse 3.30...

The vulnerability of the KVM switch display microprogramming system ATEN CL5708IM lies in the fact that the output operation goes beyond the buffer in memory, allowing a malicious actor to cause malfunctions in the service.

The vulnerability of the KVM switch display microprogramming system of ATEN CL5708IM is related to the output of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

UBUNTU-CVE-2025-38235

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix "appletbbacklight" backlight device reference counting During appletbkbdprobe, probe attempts to get the backlight device by name. When this happens backlightdevicegetbyname looks for a device in the backlig...