Lucene search
+L

2158 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/26 8:4 p.m.11 views

Malicious code in telebot-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae13454f920b5cce1011546e4802ed263ce8218d4b484ef8471142abb42c3f3e The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7.1AI score
SaveExploits0References2
OSV
OSV
added 2025/12/26 8:4 p.m.5 views

MAL-2025-192942 Malicious code in telebot-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae13454f920b5cce1011546e4802ed263ce8218d4b484ef8471142abb42c3f3e The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/26 8:3 p.m.11 views

Malicious code in telegrem (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f2186dc29d07dc851d756bae0b5d080ebe5923efe6654fdb4aa9ec55bbba9b6a The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7.1AI score
SaveExploits0References2
OSV
OSV
added 2025/12/22 10:16 p.m.10 views

CVE-2023-53964

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass...

9.8CVSS5.9AI score0.00888EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
added 2025/12/18 9:34 p.m.13 views

CVE-2025-55254

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow to execute malicious code in certain web pages...

4.8CVSS7.3AI score0.00169EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/18 8:37 p.m.7 views

CVE-2025-59849

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow the execution of malicious code in web pages...

6.1CVSS7.3AI score0.00163EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 11:21 a.m.4 views

CVE-2025-10910 Gaining remote control over Govee devices

A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the device from its legitimate owner’s account. The server‑side API allows device...

9.3CVSS6.4AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/17 9:16 p.m.6 views

CVE-2025-59849

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow the execution of malicious code in web pages...

6.1CVSS6AI score0.00163EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/17 9:16 p.m.24 views

CVE-2025-59849

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow the execution of malicious code in web pages...

6.1CVSS0.00163EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/17 9:16 p.m.18 views

CVE-2025-55254

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow to execute malicious code in certain web pages...

4.8CVSS0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/17 8:46 p.m.51 views

CVE-2025-55254 HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow to execute malicious code in certain web pages...

3.7CVSS0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/17 8:46 p.m.4 views

CVE-2025-55254 HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow to execute malicious code in certain web pages...

3.7CVSS6.9AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/17 8:46 p.m.20 views

CVE-2025-55254

The CVE-2025-55254 entry concerns HCL BigFix Remote Control Lite Web Portal, affected in versions 10.1.0.0326 and lower. The root cause is improper management of path-relative stylesheet imports, described as a Path-relative stylesheet import (PRSSI) issue, enabling potential malicious code execu...

4.8CVSS6.9AI score0.00169EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2025/12/17 8:28 p.m.17 views

CVE-2025-59849

The CVE-2025-59849 entry concerns HCL BigFix Remote Control Lite Web Portal, affected in versions 10.1.0.0326 and lower. The vulnerability arises from improper management of the Content Security Policy, enabling the execution of malicious code within web pages. The risk is tied to a web-exposed c...

6.1CVSS6.9AI score0.00163EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/12/17 8:28 p.m.38 views

CVE-2025-59849 HCL BigFix Remote Control is vulnerable to an insecure CSP configuration

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow the execution of malicious code in web pages...

4.7CVSS0.00163EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/17 8:28 p.m.4 views

CVE-2025-59849 HCL BigFix Remote Control is vulnerable to an insecure CSP configuration

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow the execution of malicious code in web pages...

4.7CVSS6.9AI score0.00163EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/17 8:28 p.m.7 views

EUVD-2025-203937

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower may allow the execution of malicious code in web pages...

4.7CVSS6.7AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.12 views

PT-2025-51915

Name of the Vulnerable Software and Affected Versions HCL BigFix Remote Control Lite Web Portal versions 10.1.0.0326 and lower Description A flaw exists in the way the software handles path-relative stylesheet imports. This could allow for the execution of malicious code within specific web pages...

3.7CVSS6.9AI score0.00169EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.8 views

HCL BigFix Remote Control 安全漏洞

HCL BigFix Remote Control is a remote desktop management platform from HCL India. A security vulnerability exists in HCL BigFix Remote Control version 10.1.0.0326 and prior versions, which stems from improper management of content security policies and could lead to the execution of malicious cod...

6.1CVSS6.9AI score0.00163EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.13 views

PT-2025-51897

Name of the Vulnerable Software and Affected Versions HCL BigFix Remote Control Lite versions 10.1.0.0326 and lower Description A flaw exists in the Content Security Policy management within the HCL BigFix Remote Control Lite Web Portal that could permit the execution of harmful code within web...

4.7CVSS6.9AI score0.00163EPSS
SaveExploits0References4
Rows per page
Query Builder