CVE-2025-52586

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...

Linux Distros Unpatched Vulnerability : CVE-2025-38316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996setmonitor The function...

Linux Distros Unpatched Vulnerability : CVE-2024-43847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring...

Linux Distros Unpatched Vulnerability : CVE-2025-21862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dropmonitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock bad magic on CPU1, syz-executor.0/7995 lock:...

Malicious code in c-monitor-dashboard (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac5ace2c2268c16914bea284713d9bf69f2414d204cb79d4f32d8aa434b4eb The OpenSSF Package Analysis project identified 'c-monitor-dashboard'...

MAL-2025-6835 Malicious code in c-monitor-dashboard (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac5ace2c2268c16914bea284713d9bf69f2414d204cb79d4f32d8aa434b4eb The OpenSSF Package Analysis project identified 'c-monitor-dashboard'...

Linux Distros Unpatched Vulnerability : CVE-2018-10861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and...

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

Linux Distros Unpatched Vulnerability : CVE-2018-18021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVMSETONREG ioctl. This is exploitable by attackers who ca...

PT-2025-32354 · Mobile Industrial Robots · Mobile Industrial Robots

Name of the Vulnerable Software and Affected Versions: Mobile Industrial Robots MiR versions prior to 3.0.0 Description: A path traversal vulnerability exists in an API endpoint within Mobile Industrial Robots MiR software. Authenticated users can extract files from the robot file system by...

Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete

...

hwmon: (ftsteutates) Fix TOCTOU race in fts_read()

...

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

Linux Distros Unpatched Vulnerability : CVE-2025-37824

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix NULL pointer dereference in tipcmonreinitself syzbot reported: tipc: Node number set to 1055423674 Oops: general protection fault, probably for...

CVE-2025-51532

Incorrect access control in Sage DPW 202412004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 202506000, released in June 2025...

PT-2025-32185 · Sage · Sage Dpw

Name of the Vulnerable Software and Affected Versions: Sage DPW versions prior to 2024 12 004 Description: Incorrect access control in Sage DPW allows unauthorized attackers to access the built-in Database Monitor via a crafted request. Recommendations: Update to version 2024 12 004 or later...

CVE-2025-51532

Summary: CVE-2025-51532 concerns Sage DPW with improper access control that could allow unauthorized users to access the built‑in Database Monitor via a crafted request. The vulnerability is described for Sage DPW versions before 2025_06_000 (notably 2024_12_004 and earlier). Affected product/ver...

Sage DPW 安全漏洞

Sage DPW is an HR system from Sage UK. A security vulnerability exists in Sage DPW version v2024.12.003, which stems from improper access control and could lead to unauthorized access to the built-in database monitor...