Dongyoung DM-AP240T/W 访问控制错误漏洞

The Dongyoung DM-AP240T/W is a wireless access point device from Dongyoung Corporation in South Korea. An access control error vulnerability exists in the Dongyoung DM-AP240T/W that originates in the /cgi-bin/syssystemconfig management endpoint to remotely retrieve a compressed configuration...

CVE-2025-63209: Exposure of Sensitive Information to an Unauthorized Actor

The ELCA Star Transmitter Remote Control firmware 1.25 for STAR150, BP1000, STAR300, STAR2000, STAR1000, STAR500, and possibly other models, contains an information disclosure vulnerability allowing unauthenticated attackers to retrieve admin credentials and system settings via an unprotected...

EUVD-2025-198088

The Eurolab ELTS100UBX device firmware version ELTS100v1.UBX is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized...

CVE-2025-63225

The Eurolab ELTS100_UBX network connectivity device (firmware version ELTS100v1.UBX ) is vulnerable to Broken Access Control due to a lack of authentication on critical administrative endpoints. This flaw allows remote attackers to directly access and modify sensitive system and network configura...

Malicious code in integrator-2829 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bcecff983d9f430d14498333405f44d090846f460508f71de76679fb2076e9 The package integrator-2829 was found to contain malicious code. Source: ghsa-malware e38f5e4a7250f8d8199f26a59e70750071a304fc729893e38b7074a1cd3ab50...

HSEC-2023-0010 git-annex private data exfiltration to compromised remote

git-annex private data exfiltration to compromised remote Some uses of git-annex were vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN. Joey He...

Medium: java-1.8.0-openjdk

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 a...

Exploit for Missing Authentication for Critical Function in Oracle Marketing

⚠️ CVE‑2025‑53072 & CVE‑2025‑62481 Critical Vulnerabilities...

The vulnerability of the Jenkins automation server allows a perpetrator to compromise the target system.

The vulnerability of the Jenkins automation server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the target system remotely...

MariaDB Multiple Vulnerabilities (MDEV-36268, MDEV-36613)

MariaDB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if description...

Oracle Primavera Unifier (October 2025 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform Enterprise Security API for Java...

CVE-2025-53049

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web Administration. Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP...

Ubuntu: Security Advisory (USN-7820-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in redirect-k4s26t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55cb8882c2d3f19343318b96912306c9e31f70febe05d3bbc0c90206ffdcf3c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47987 Malicious code in apijsuni1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc739fcfc81f8d8dc67032dc5092aaa2e25b397bc838baf43d99e10dff110057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2020-17353

Malware in sbrugna...

EUVD-2020-17864

Malware in sbrugna...

EUVD-2019-11033

Malware in sbrugna...

EUVD-2021-10023

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-984872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984872 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and...