PT-2025-39166

Name of the Vulnerable Software and Affected Versions Novakon P series versions P – V2001.A.C518o2 Description An improper authentication issue exists in Novakon P series devices. This allows unauthenticated attackers to upload and download applications to and from the device. Recommendations At...

PT-2025-39167

Name of the Vulnerable Software and Affected Versions Novakon P series versions prior to V2001.A.C518o2 Description A flaw in privilege management within Novakon P series devices allows attackers to obtain root privileges if a single service is compromised. This impacts industrial environments an...

CVE-2025-9963: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions. This way the system can also be compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

PT-2025-39163

Name of the Vulnerable Software and Affected Versions Novakon P series version P – V2001.A.C518o2 Description A path traversal issue exists in Novakon P series that can expose the root file system "/" and allow modification of all files with root permissions, potentially leading to system...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operating pages from Taiwan, China-based Speedcom Novakon. A security vulnerability exists in Novakon P series version V2001.A.C518o2, which stems from improper authentication and could allow an unauthenticated attacker to upload and download...

PT-2025-39162

Name of the Vulnerable Software and Affected Versions Novakon P series version V2001.A.C518o2 Description A buffer overflow exists in Novakon P series. Successful exploitation allows attackers to obtain root permission without authentication. Recommendations At the moment, there is no information...

CVE-2025-9965: Improper Authentication

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9962: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operation pages from Taiwan, China-based Speedcom Novakon. A security vulnerability exists in the Novakon P series version V2001.A.C518o2, which stems from improper privilege management and could allow an attacker to gain root privileges...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operation pages from Taiwan, China-based Novakon. A security vulnerability exists in the Novakon P series version V2001.A.C518o2, which stems from the presence of a buffer overflow that could allow an unauthenticated attacker to gain root...

MAL-2025-43085 Malicious code in @zalastax/nolb-_trivikr-test_p (npm)

The package @zalastax/nolb-trivikr-testp was found to contain malicious code...

Malicious code in @zalastax/nolb-_trivikr-test_p (npm)

The package @zalastax/nolb-trivikr-testp was found to contain malicious code...

9p: add missing locking around taking dentry fid list

...

CVE-2025-9692

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

CVE-2025-9692

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

CVE-2025-9692

CVE-2025-9692 affects Campcodes Online Shopping System 1.0. The vulnerability is an SQL injection in /product.php via the p parameter. The attack can be performed remotely, and public exploit details exist. No patch/version fix information is provided in the supplied documents; remediation status...

CVE-2025-9692 Campcodes Online Shopping System product.php sql injection

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

CVE-2025-9692: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping System 1.0. Affected is an unknown function of the file /product.php. Performing manipulation of the argument p results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

Security Bulletin: Timing Side-Channel in PPC64LE Assembly Leaks Bits of Secret Scalars in P-256 Operations, which affects IBM watsonx.data

Summary Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the...

CVE-2025-9400 YiFang CMS P_file.php mergeMultipartUpload unrestricted upload

A flaw has been found in YiFang CMS up to 2.0.5. This affects the function mergeMultipartUpload of the file app/utils/base/plugin/Pfile.php. This manipulation of the argument File causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be...