CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...

CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...

CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...

CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The underlying issue is that the update mechanism does not validate the integrity of the manual.sh script, allowing an attacker to inject arbitrary ...

PT-2025-38749

Name of the Vulnerable Software and Affected Versions Sound4 PULSE-ECO AES67 version 1.22 Description The web-based management interface is susceptible to Remote Code Execution RCE through a malicious firmware update package. The system does not properly validate the integrity of the manual.sh...

CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...

USN-7737-1 linux-azure, linux-azure-6.8, linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; -...

PT-2025-46745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's pwm subsystem, specifically within the berlin driver. An incorrect register was being used during suspend and resume operations. The driver was...

Malicious code in pulse_v4geh_z4wnk_whirlwind (npm)

The package pulsev4gehz4wnkwhirlwind was found to contain malicious code...

MAL-2025-14443 Malicious code in amber-pulse-olu886-project (npm)

The package amber-pulse-olu886-project was found to contain malicious code...

Malicious code in resonance-pulse-dpl266-project (npm)

The package resonance-pulse-dpl266-project was found to contain malicious code...

Malicious code in app-pulse-style (npm)

The package app-pulse-style was found to contain malicious code...

Malicious code in amber-pulse-olu886-project (npm)

The package amber-pulse-olu886-project was found to contain malicious code...

MAL-2025-30846 Malicious code in pulse-aura-zqg679-project (npm)

The package pulse-aura-zqg679-project was found to contain malicious code...

MAL-2025-14662 Malicious code in app-pulse-style (npm)

The package app-pulse-style was found to contain malicious code...

MAL-2025-30850 Malicious code in pulse_v4geh_z4wnk_whirlwind (npm)

The package pulsev4gehz4wnkwhirlwind was found to contain malicious code...

Malicious code in pulse-aura-zqg679-project (npm)

The package pulse-aura-zqg679-project was found to contain malicious code...

Malicious code in pulse_otsds_slv9v_vantage (npm)

The package pulseotsdsslv9vvantage was found to contain malicious code...

MAL-2025-32138 Malicious code in resonance-pulse-dpl266-project (npm)

The package resonance-pulse-dpl266-project was found to contain malicious code...

The vulnerability of the Flash Cache component in single-Core Microcontrollers ESP32-S2, ESP32-S2F, allows a hacker to read the cached data again.

The vulnerability of the Flash Cache component in single-Core Microcontrollers ESP32-S2 and ESP32-S2F is related to improper protection against voltage spikes and clock speeds. Exploiting this vulnerability allows an attacker to reread cached data by triggering a reset pulse directly before...