PT-2026-23098

Name of the Vulnerable Software and Affected Versions IDC SFX2100 satellite receiver affected versions not specified Description The /sbin/ip utility is installed with the setuid bit set on the IDC SFX2100 satellite receiver. This configuration allows any local user who can execute the binary to...

CVE-2025-15543 Read-Only Root Access via USB Storage Device in TP-Link VX800v

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physical access read‑only access to system files...

CVE-2021-22785

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 Versions prior to V3.40, Modicon M340 X...

CVE-1999-0324

ppl program in HP-UX allows local users to create root files through symlinks...

AndSoft e-TMS Path Traversal Vulnerability

AndSoft e-TMS is a logistics management software from AndSoft Spain. A path traversal vulnerability exists in AndSoft e-TMS, which stems from the docurl parameter failing to properly filter special elements in the path of a resource or file, and can be exploited by an attacker to gain access to a...

EUVD-2019-16227

Malware in sbrugna...

EUVD-2015-4068

Malware in sbrugna...

EUVD-2020-7690

Malware in sbrugna...

EUVD-1999-0325

Malware in sbrugna...

EUVD-1999-0324

Malware in sbrugna...

EUVD-2025-32295

Malicious code in bioql PyPI...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1, which stems from an information leak in the adminsafe.php component that could...

PT-2025-40527

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.1 Description An information disclosure issue exists in SeaCMS 13.1. The flaw is located in the admin safe.php component within the /btcoan/ directory. Authenticated administrators can scan and download the application’s sour...

CVE-2025-60449

An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the adminsafe.php component located in the /btcoan/ directory. This security flaw allows authenticated administrators to scan and download not only the application’s source code but also...

AndSoft e-TMS 路径遍历漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. A path traversal vulnerability exists in AndSoft e-TMS, which stems from the docurl parameter failing to properly filter special elements in the path of a resource or file, and can be exploited by an attacker to gain access to a...

CVE-2024-21935

CVE-2024-21935 affects AMD MI300X accelerators, specifically the Satellite Management Controller (SMC). The issue arises from insufficient input validation in the SMC, which could let an attacker with privileges manipulate Redfish API commands to remove files from the local root directory, potent...

CVE-2024-21935

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...

CVE-2024-21935

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...

AMD Instinct MI300X accelerators 安全漏洞

AMD Instinct MI300X accelerators is a data center-grade GPU accelerator card from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Instinct MI300X accelerators that stems from improper input validation and could allow a privileged attacker to delete local root directory files...

CVE-2025-36244

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables...