4435 matches found
CVE-2025-57578
An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...
CVE-2025-57578
An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...
CVE-2025-57578
A security vulnerability exists in H3C Magic M wireless routers, specifically affecting version M2V100R006 . The issue stems from the use of hard-coded credentials (CWE-798), where a default password can be exploited by a remote attacker to achieve arbitrary code execution . To remediate this vul...
CVE-2025-57578: Use of Hard-coded Credentials
An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password...
H3C Magic M 安全漏洞
H3C Magic M is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in H3C Magic M that stems from the use of a default password that could lead to remote execution of arbitrary code...
PT-2025-37323
Name of the Vulnerable Software and Affected Versions: H3C Magic M Device versions M2V100R006 Description: An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code by using the default password. Recommendations: Change the default password for H3C Magic M Devic...
PT-2025-36524
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.11 Description: WeGIA is a Web manager for charitable institutions. An arbitrary file upload issue exists due to insufficient file type validation. The application only checks MIME types for Excel files at the...
Linux kernel HID DoS
The vulnerability of the applemagicbacklightreportset function in the HID component of the Linux kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a perpetrator to trigger a service failure...
Linux Distros Unpatched Vulnerability : CVE-2024-45691
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose...
Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.
...
AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals
Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued target. With the rapid expansion and adoption of AI, it is more critical than ever to ensure the endpoint is adequately secured by a platform...
SUSE CVE-2025-38557
In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A malicious HID device with quirk APPLEMAGICBACKLIGHT can trigger a NULL pointer dereference whilst the power feature-report is toggled and sent ...
CVE-2025-38557
In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A malicious HID device with quirk APPLEMAGICBACKLIGHT can trigger a NULL pointer dereference whilst the power feature-report is toggled and sent ...
UBUNTU-CVE-2025-38557
In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A malicious HID device with quirk APPLEMAGICBACKLIGHT can trigger a NULL pointer dereference whilst the power feature-report is toggled and sent ...
CVE-2025-38557
In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A malicious HID device with quirk APPLEMAGICBACKLIGHT can trigger a NULL pointer dereference whilst the power feature-report is toggled and sent ...
Malicious code in test-mlw2-mikes-straw-magic-rurps (npm)
The package test-mlw2-mikes-straw-magic-rurps was found to contain malicious code...
Malicious code in availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr (npm)
The package availab-le-alb-um-zip-19300-magic-time-1ei3b-iuzxjr was found to contain malicious code...
Malicious code in test-mlw2-leats-magic-siege-silky (npm)
The package test-mlw2-leats-magic-siege-silky was found to contain malicious code...
