MSC-2025-2480

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

Malicious code in synapse-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f22e2f65543683192030203ce08eecf0c137c3bc94f711cf9dd5c143dd1bd19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in petstore-typescript-node-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df75428cea0bd4c85e2a5e3442fb967d4ec954a570cceb9f0d888e53b6cafd91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-49650 dmaengine: qcom: bam_dma: fix runtime PM underflow

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: fix runtime PM underflow Commit dbad41e7bb5f "dmaengine: qcom: bamdma: check if the runtime pm enabled" caused unbalanced pmruntimeget/put calls when the bam is controlled remotely. This commit reverts it...

PT-2025-29145 · Trend Micro · Trend Micro Worry-Free Business Security Services

Name of the Vulnerable Software and Affected Versions: Trend Micro Worry-Free Business Security Services WFBSS agent affected versions not specified Description: A missing authentication issue in the Trend Micro Worry-Free Business Security Services WFBSS agent could allow an unauthenticated...

PT-2025-6975 · Ubiquiti · Unifi Protect Cameras

Name of the Vulnerable Software and Affected Versions: UniFi Protect Cameras affected versions not specified Description: The issue is related to a lack of firmware update capability due to incorrect certificate validation in UniFi Protect Cameras. This could allow a remote attacker to gain full...

PT-2025-6976 · Ubiquiti · Unifi Protect Cameras

Name of the Vulnerable Software and Affected Versions: UniFi Protect Cameras affected versions not specified Description: The issue is related to errors in the certificate authentication procedure of the UniFi Protect Cameras system. Exploitation of this issue may allow a remote attacker to gain...

CVE-2025-25522

Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25522

Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25522

Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25522

Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25522

The Linksys WAP610N (version v1.0.05.002 ) is susceptible to a buffer overflow vulnerability caused by a lack of length verification during the time setting operation . Successful exploitation allows an attacker to directly control the remote target device , potentially leading to the execution o...

CVE-2025-25523

The Trendnet TEG-40128 Web Smart Switch v1(1.00.023) is vulnerable to a buffer overflow caused by a lack of length verification during the mobile access point setup operation . Successful exploitation allows an attacker to directly control the remote target device or cause it to execute arbitrary...

CVE-2025-25522

Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

PT-2025-6378 · Trendnet · Teg-40128 Web Smart Switch

Name of the Vulnerable Software and Affected Versions: Trendnet TEG-40128 Web Smart Switch version 11.00.023 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification in the mobile access point setup operation. This vulnerability allows an attacke...

PT-2025-6377 · Linksys · Linksys Wap610N

Name of the Vulnerable Software and Affected Versions: Linksys WAP610N version 1.0.05.002 Description: A buffer overflow issue exists due to the lack of length verification, related to the time setting operation. This allows an attacker to directly control the remote target device if the issue is...

CVE-2021-26637

There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device...