EUVD-2026-8655

In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyncUpload, where a predictable temporary identifier, based on timestamp and filename, can enable collisions and file content tampering...

EUVD-2025-138630

Malicious code in polymer-afahf-rad npm...

EUVD-2025-139100

Malicious code in nuyar-dad-rad npm...

Malicious code in nuyar-dad-rad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e41c78a5b19a14f916db928ef423659752c3d32e3f380509ba55687850f4db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144547

Malicious code in augis-pomdoi9r-rad npm...

Malicious code in augis-pomdoi9r-rad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2dc9b75bf4ce99be4c26309f986897c05285e1620308889000783486103368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-37925

Cross Site Scripting vulnerability in Quipux 4.0.1 through e1774ac allows anexos/anexosnuevo.php asocImgRad...

EUVD-2019-19106

Malware in sbrugna...

EUVD-2020-5520

Malware in sbrugna...

Malicious code in @zalastax/nolb-rad (npm)

The package @zalastax/nolb-rad was found to contain malicious code...

MAL-2025-13532 Malicious code in @zalastax/nolb-rad (npm)

The package @zalastax/nolb-rad was found to contain malicious code...

CVE-2025-5645

A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function rconspalinit in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. Attacking locally is a requirement. The complexity of ...

CVE-2022-30350

Avanquest Software RAD PDF PDFEscape Online 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Online tool provides users with a "white out" functionality for redacting images, text, and other graphics from a PDF document. However, this mechanism does not remove underlying tex...

CVE-2019-6268

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

PLANET FW-WGS-804HPT 安全漏洞

Planet FW-WGS-804HPT is a wall mounted managed switch from China PLANET. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the failure of the radIpkey parameter in the webradiusSrvpost function to correctly validate the length of the input data, which can ...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on June 18, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-170-01 RAD Data Communications SecFlow-2 CISA encourages users and administrators to review...

RAD Data Communications SecFlow-2

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : RAD Data Communications Equipment : SecFlow-2 Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

rad-ar.or.jp Cross Site Scripting vulnerability OBB-3907498

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Directory traversal

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...

CVE-2019-6268

Summary : CVE-2019-6268 affects RAD SecFlow-2 devices (Hardware 0202; Firmware 4.1.01.63; U-Boot 2010.12). The vulnerability is a directory traversal via URIs starting with /.., allowing access to OS files (demonstrated reading /etc/shadow). Public docs report CVSS v3.1 base score 7.5 (HIGH) and ...