Lucene search
+L

3820 matches found

OSV
OSV
added 2025/10/31 2:13 p.m.5 views

OESA-2025-2590 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

5.5CVSS6.8AI score0.00342EPSS
SaveExploits1References2
HackRead
HackRead
added 2025/10/30 8:47 p.m.9 views

Gartner Recognizes Flowable in 2025 Magic Quadrant for Business Orchestration and Automation Technologies

ZÜRICH, Switzerland - Flowable, a global provider of enterprise automation and orchestration software, has been recognized in the…...

7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/24 2:14 a.m.4 views

EUVD-2025-35748

Malicious code in tailwind-magic npm...

6.6AI score
SaveExploits0References1
OSV
OSV
added 2025/10/24 2:14 a.m.4 views

MAL-2025-48584 Malicious code in tailwind-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c44f5a090a9395704332bdcdb8d6cdeb4f73b208b4c55bd59d7b8d67325fd08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Snyk
Snyk
added 2025/10/24 2:14 a.m.2 views

Malicious Package

Overview tailwind-magic is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/24 2:14 a.m.4 views

Malicious code in tailwind-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c44f5a090a9395704332bdcdb8d6cdeb4f73b208b4c55bd59d7b8d67325fd08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/17 12:43 a.m.22 views

CVE-2025-61330

A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C. The vulnerability stems from the use of a hard-coded weak password for the root account in the /etc/shadow configuration or even the absence of any password a...

6.5CVSS7.2AI score0.00258EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/16 6:15 p.m.10 views

CVE-2025-61330

A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C. The vulnerability stems from the use of a hard-coded weak password for the root account in the /etc/shadow configuration or even the absence of any password a...

6.5CVSS0.00258EPSS
SaveExploits0References1
Microsoft Secure
Microsoft Secure
added 2025/10/16 6:0 p.m.10 views

Microsoft named a Leader in the 2025 Gartner® Magic Quadrant™ for SIEM

We’re honored to share that Microsoft has again been recognized as a Leader in the2025 Gartner® Magic Quadrant™ for Security Information and Event Management SIEM.1 We believe this recognition reinforces Microsoft Sentinel's position as an industry-leading, cloud and AI-powered SIEM—designed to...

7AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2025/10/16 6:0 p.m.8 views

Microsoft named a Leader in the 2025 Gartner® Magic Quadrant™ for SIEM

We’re honored to share that Microsoft has again been recognized as a Leader in the2025 Gartner® Magic Quadrant™ for Security Information and Event Management SIEM.1 We believe this recognition reinforces Microsoft Sentinel's position as an industry-leading, cloud and AI-powered SIEM—designed to...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/10/16 2:28 p.m.17 views

LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets

An investigation into the compromise of an Amazon Web Services AWS-hosted infrastructure has led to the discovery of a new GNU/Linux rootkit dubbed LinkPro , according to findings from Synacktiv. "This backdoor features functionalities relying on the installation of two eBPF extended Berkeley...

9.8CVSS9AI score0.99999EPSS
SaveExploits49
Vulnrichment
Vulnrichment
added 2025/10/16 12:0 a.m.5 views

CVE-2025-61330

A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C. The vulnerability stems from the use of a hard-coded weak password for the root account in the /etc/shadow configuration or even the absence of any password a...

6.9AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.7 views

H3C Magic M安全漏洞

H3C Magic M is a series of wireless routers from China's Xinhua San H3C. A security vulnerability exists in H3C Magic M. The vulnerability stems from the use of hard-coded weak passwords or unset passwords in the firmware, which could allow an attacker to gain maximum root privileges via Telnet...

6.5CVSS7.1AI score0.00258EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/16 12:0 a.m.28 views

CVE-2025-61330

CVE-2025-61330 affects H3C Magic-branded devices. The root cause is a hard-coded weak password (or no password) for the root account in /etc/shadow, with Telnet enabled by default or user-enabled, and Virtual Servers exposing devices to the public network. This enables remote attacker access to r...

6.5CVSS6.9AI score0.00258EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2025/10/15 4:30 p.m.20 views

Rapid7: 7 years of recognition in Gartner® Magic Quadrant™ for SIEM

We’re proud to share that Rapid7 has been recognized in the 2025 Gartner Magic Quadrant for Security Information and Event Management SIEM. This is the seventh year we have been positioned in this report, which means we’ve been recognized in every report following the launch of our SIEM offering,...

6.9AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/10/08 4:23 a.m.5 views

CVE-2025-11204 RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.0.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

7.2CVSS5.9AI score0.00383EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-20250

Malware in sbrugna...

4.3CVSS6.9AI score0.00824EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2009-2873

Malware in sbrugna...

6.8CVSS6.4AI score0.00903EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2005-3378

Malware in sbrugna...

5.1CVSS6.4AI score0.0145EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-3375

Malware in sbrugna...

5.1CVSS6.4AI score0.01352EPSS
SaveExploits0References6
Rows per page
Query Builder