Microsoft Windows SDK Installed (Windows)

Binary data windowssdkinstalled.nbin...

Oracle Linux 10 : .NET / 8.0 (ELSA-2025-7599)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7599 advisory. 8.0.117-1.0.1 - Add support for Oracle Linux 8.0.117-1 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 8.0.116-2 - Update to .NET SDK...

Windows SDK < 10.0.26100.4188 Privilege Escalation

The version of Windows SDK installed on the remote host is prior to 10.0.26100.4188. It is, therefore, affected by a privilege escalation vulnerability. Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally. Note that Nessus has not tested for this iss...

Oracle Linux 10 : .NET / 8.0 (ELSA-2025-8814)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8814 advisory. 8.0.117-1.0.1 - Add support for Oracle Linux 8.0.117-1 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 8.0.116-2 - Update to .NET SDK...

Malicious code in sdk.babelhelpers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ecc77e86573c3fd986a8fac35d0368893554af91bcf9f31d8e0c2fa342d3890 Any computer that has this package installed or running should be considered...

CVE-2025-44559

An issue in the Bluetooth Low Energy BLE stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

CVE-2025-44559

An issue in the Bluetooth Low Energy BLE stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

CVE-2024-57708

An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, proto, and Object.assign components. NOTE: this is disputed by the Supplier who does not agree it is a prototype pollution vulnerability...

PT-2025-27243 · Realtek · Realtek Rtl8762E Ble Sdk

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762E BLE SDK version 1.4.0 Description: The issue in the Bluetooth Low Energy BLE stack allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

CVE-2025-44559

Realtek RTL8762E BLE SDK v1.4.0 is affected by a BLE stack vulnerability (CVE-2025-44559) that allows an attacker within Bluetooth range to trigger a Denial of Service by sending a specific sequence of crafted control packets. Affected component is the Realtek RTL8762E BLE SDK BLE stack; root cau...

CVE-2025-44559

An issue in the Bluetooth Low Energy BLE stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service DoS via sending a specific sequence of crafted control packets...

MAL-2025-5449 Malicious code in phantom-sdk-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a02da8340505757389af71a4289fd4f3fd0825fdfcb80ecf3a848d8c3c6db0 Any computer that has this package installed or running should be considered...

Malicious code in phantom-sdk-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a02da8340505757389af71a4289fd4f3fd0825fdfcb80ecf3a848d8c3c6db0 Any computer that has this package installed or running should be considered...

MAL-2025-5285 Malicious code in react-plaid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e5a7cd6740a8b92b5b0c681bce252fd1850ace8501de899aea496321176c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM App Connect Enterprise is vulnerable to Remote Code Execution and improper preservation of permissions due to jsonpath-plus & snowflake-sdk (CVE-2025-1302 & CVE-2025-24791)

Summary IBM App Connect Enterprise runtime, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise Connector Discovery and OpenAPI Editor are vulnerable to Remote Code Execution RCE and improper preservation of permissions due to jsonpath-plus & snowflake-sdk. Vulnerabilit...

Malicious code in rush-sdk-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fa10be10595dcaddcd28ad64cd62ae55a44b7354d6bb1de952adc3cdc5b5c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5287 Malicious code in rush-sdk-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fa10be10595dcaddcd28ad64cd62ae55a44b7354d6bb1de952adc3cdc5b5c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms

Summary Multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by IBM Tivoli System Automation for Multiplatforms. These issues were disclosed as part of the IBM Java SDK updates in April 2025. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerabili...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities in IBM Java SDK ( CVE-2025-21587,CVE-2025-30698 & CVE-2025-4447)

Summary There are multiple vulnerabilities in IBM Java SDK, Java Technology Edition used by IBM App Connect Enterprise and IBM Integration Bus for z/OS . Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allo...

PT-2025-28940 · Realtek · Rtl8762E Sdk +1

Name of the Vulnerable Software and Affected Versions: Realtek RTL8762EKF-EVB RTL8762E SDK version 1.4.0 Description: The Realtek RTL8762EKF-EVB RTL8762E SDK does not perform adequate permission checks on critical fields within Bluetooth Low Energy BLE data packets. This allows attackers to cause...