CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B Automation Studio version =4.0 may allow an unauthenticated network attacker to execute code...

CVE-2022-33324

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120ENCPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSE...

CVE-2020-24682

Unquoted Search Path or Element vulnerability in B Industrial Automation Automation Studio, B Industrial Automation NET/PVI allows Target Programs with Elevated Privileges.This issue affects Automation Studio: from 4.0 through 4.6, from 4.7.0 before 4.7.7 SP, from 4.8.0 before 4.8.6 SP, from 4.9....

PT-2026-1869

Name of the Vulnerable Software and Affected Versions Intelbras CFTV IP NVD 9032 R Ftd version 2.800.00IB00C.0.T Description A security issue exists in Intelbras CFTV IP NVD 9032 R Ftd version 2.800.00IB00C.0.T that allows an unauthenticated attacker to bypass the multi-factor authentication MFA...

CVE-2025-67070

The CVE-2025-67070 entry concerns Intelbras CFTV IP NVD 9032 R Ftd, v2.800.00IB00C.0.T, where an unauthenticated attacker can bypass MFA during password recovery, enabling the attacker to change the admin password and gain full access to the admin panel. Affected components/versions are consisten...

CVE-2022-50869

The connected material confirms a Linux kernel issue in fs/ntfs3 causing slab-out-of-bounds when PAGE_SIZE is 64K. The root cause is a mismatch where read_log_page/log_read_rst may copy a 4K DefaultLogPageSize buffer into a larger destination (64K page), risking out-of-bounds access. The remediat...

curl: Heap Overflow in cURL AmigaOS Socket Implementation

Buffer Overflow in cURL AmigaOS Socket Implementation Report Metadata - Report ID: H1-CURL-AMIGAOS-001 - Report Title: Heap Buffer Overflow in Curlipv4resolver in AmigaOS Socket Backend - Component: /home/el-ha9/curl/lib/amigaos.c - Curlipv4resolver function - Affected Versions: All cURL versions...

Number withdrawal

R is a statistical computing software developed by The R Foundation. This CVE number has been withdrawn...

PT-2025-50247

Name of the Vulnerable Software and Affected Versions Selea Targa IP OCR-ANPR Camera affected versions not specified Description The Selea Targa IP OCR-ANPR Camera has an unauthenticated command injection issue in the utils.php file. This allows remote attackers to execute arbitrary shell command...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

TencentOS Server 4: R (TSSA-2024:0936)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0936 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

R.V.R Elettronica TEX 安全漏洞

The R.V.R Elettronica TEX is an FM transmitter from R.V.R Elettronica, Italy. A security vulnerability exists in the R.V.R Elettronica TEX TEXL-000400 version and TLAN-000400 version, which stems from improper access control and could lead to complete system compromise...

SUSE-SU-2025:4111-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857. ...

Malicious code in nuyar-id-r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e62f534a3e098eee2d42f84833cd941a4df4b143229d3a30d6b51d73392cef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139084

Malicious code in nuyar-id-r npm...

EUVD-2025-144548

Malicious code in augis-pomdoi9r-r npm...

Malicious code in jelek-r-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee14f533151602d16e016866b4d443fdb28b89c357a26f9f9402b6810235a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb4cb07fdc280c3172a47139f39058eca0dda24f22b5fc1657ad23d4d4cf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78458 Malicious code in gita-kacang23-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4335baff7a8105f0de96a891c04f7f0774d89e2ddf8d66a57922aa57840a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81523 Malicious code in surya-jamblang82-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6b7778f5fb79b1ff74543a8bd075c1f97b4911f6f0d71a46605e4b018b55a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...