CVE-2025-57954: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Poll Maker poll-maker allows DOM-Based XSS.This issue affects Poll Maker: from n/a through = 6.0.2...

PT-2025-38797

Name of the Vulnerable Software and Affected Versions Ays Pro Photo Gallery by Ays versions through 6.3.6 Description The software contains a flaw related to improper input handling during web page creation, leading to a DOM-Based Cross-site Scripting issue. This allows for the injection of...

WordPress plugin Ays Pro Poll Maker has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

Blackmagic Design ATEM Mini Pro security vulnerability

Blackmagic Design ATEM Mini Pro is a live video streaming device from Blackmagic Design, Inc. A security vulnerability exists in the Blackmagic Design ATEM Mini Pro version 2.7 that originates from an unauthenticated Telnet service exposing sensitive device information, which could lead to...

CVE-2025-57441

The Blackmagic ATEM Mini Pro 2.7 is vulnerable to an information disclosure flaw because an unauthenticated Telnet service on port 9990 exposes sensitive device and stream configuration details. By connecting to this service, an attacker can access a protocol preamble that leaks video mode , rout...

Blackmagic Design ATEM Mini Pro security vulnerability

Blackmagic Design ATEM Mini Pro is a live video streaming device from Blackmagic Design, USA. A security vulnerability exists in the Blackmagic Design ATEM Mini Pro version 2.7 that originates from an undocumented Telnet service accepting unauthenticated commands in clear text, which could allow ...

CVE-2025-57440: Uncontrolled Resource Consumption

The Blackmagic ATEM Mini Pro 2.7 exposes an undocumented Telnet service on TCP port 9993, which accepts unauthenticated plaintext commands for controlling streaming, recording, formatting storage devices, and system reboot. This interface, referred to as the "ATEM Ethernet Protocol 1.0", provides...

CVE-2025-34195

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 Windows client deployments contain a remote code execution vulnerability during driver installation caused by unquoted program paths. The PrinterInstallerClient driver-installati...

Exploit for CVE-2025-61546

vulnerability-disclosures Public disclosures of software vulne...

CVE-2025-34195

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 Windows client deployments contain a remote code execution vulnerability during driver installation caused by unquoted program paths. The PrinterInstallerClient driver-installati...

CVE-2025-34195 Vasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\Program.exe

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 Windows client deployments contain a remote code execution vulnerability during driver installation caused by unquoted program paths. The PrinterInstallerClient driver-installati...

Malicious code in validator-utils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe16686eac8cc9669d7b7cb7b2fb58b8ee27416f8281bf10cabe5710fff4618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview validator-utils-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in regex-validator-pro

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47456 Malicious code in regex-validator-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43e71c52a7849efd31974c08c867fd14d1e1d7ddffdc60e8ae074e9586a326a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47457 Malicious code in validator-utils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe16686eac8cc9669d7b7cb7b2fb58b8ee27416f8281bf10cabe5710fff4618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview regex-validator-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in validator-utils-pro

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in regex-validator-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43e71c52a7849efd31974c08c867fd14d1e1d7ddffdc60e8ae074e9586a326a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AXIS Camera Station Pro Permission Bypass DoS

The vulnerability of the AXIS Camera Station Pro software for video management is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability could allow an attacker to gain access to delete arbitrary files and cause service failures...