PT-2025-46891

Name of the Vulnerable Software and Affected Versions Compressor versions prior to 4.11.1 Description An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code. The issue was addressed by refusing external connections by default. Recommendations Upda...

Microsoft Edge (Chromium) < 142.0.3595.80 (CVE-2025-13042)

The version of Microsoft Edge installed on the remote Windows host is prior to 142.0.3595.80. It is, therefore, affected by a vulnerability as referenced in the November 13, 2025 advisory. - Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to...

CVE-2025-64186

Evervault is a payment security solution. A vulnerability was identified in the evervault-go SDK’s attestation verification logic in versions of evervault-go prior to 1.3.2 that may allow incomplete documents to pass validation. This may cause the client to trust an enclave operator that does not...

CVE-2025-46608

Dell Data Lakehouse, versions prior to 1.6.0.0, contains an Improper Access Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. This vulnerability is considered Critical, as it may result in...

CVE-2025-46428

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

CVE-2024-48829

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code 'Code Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

EUVD-2025-131912

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-61623

CVE-2025-61623 is a reflected cross-site scripting vulnerability in Apache OFBiz affecting versions before 24.09.03. All connected sources consistently indicate the issue arises from user-provided input reflected in responses, enabling XSS unless patched. The recommended remediation is to upgrade...

CVE-2025-11560

CVE-2025-11560 — Concrete details exist for the WordPress plugin. The affected software is the Team Members Showcase WordPress plugin (versions before 3.5.0; e.g., ≤3.4.0). The root cause is a lack of sanitization/escaping of a parameter before outputting it on the page, causing a reflected cross...

Apple TV < 26.1 Multiple Vulnerabilities (125637)

According to its banner, the version of Apple TV on the remote device is prior to 26.1. It is therefore affected by multiple vulnerabilities as described in the 125637 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid275165; scriptversion"1.1";...

PT-2025-46699

Name of the Vulnerable Software and Affected Versions Open Access Management OpenAM versions prior to 16.0.0 Description Open Access Management OpenAM contains a flaw where, if the claims parameter supported parameter is enabled, the "oidc-claims-extension.groovy" script allows injection of...

N-able N-central 安全漏洞

N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4, which originates from XML external enti...

Linux Distros Unpatched Vulnerability : CVE-2025-13021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145. CVE-2025-13021 Note that Nessu...

Malicious code in prior_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f550781a975f061c4af6060472128aee4f562bf375a68cae2fbea8e48573b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-95746

Malicious code in priorroadrunnerz3n npm...

EUVD-2025-95748

Malicious code in priorlizardz3n npm...

MAL-2025-122554 Malicious code in prior_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cea532cb294460f572dfdf7fe6b761b6ea303723a026af0f1fed38859c9ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61840 Format Plugins | Out-of-bounds Read (CWE-125)

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim...

CVE-2025-61844 Format Plugins | Out-of-bounds Read (CWE-125)

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim...

EUVD-2025-93470

Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may...