PT-2025-46886

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDMZSettings' functionality, where the 'IPAddress' parameter in prog.cgi is stored in NVRAM and later used by librcm.so to construct iptables commands...

CVE-2025-60676

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetNetworkSettings' functionality of prog.cgi, where the 'IPAddress' and 'SubnetMask' parameters are directly concatenated into shell commands executed...

CVE-2025-60700

A command injection vulnerability exists in the D-Link DIR-882 Router firmware (version DIR882A1_FW102B02 ) within the prog.cgi and librcm.so binaries. The root cause is a lack of input sanitization where the sub_4455BC function in prog.cgi stores user-supplied SetDMZSettings/IPAddress values in ...

Siemens SIMATIC S7-1500 Signal Handler Race Condition (CVE-2025-4598)

A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non- SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the origin...

SUSE SLES12 Security Update : runc (SUSE-SU-2025:4077-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4077-1 advisory. Update to runc v1.3.3. Upstream changelog is available from . bsc1252232 CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 Update to runc v1.3.2...

CVE-2025-60698

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub432F60 function in prog.cgi stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvramsafeset"SysLogRemoteIPAddress", .... These values are...

CVE-2025-60672

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDynamicDNSSettings' functionality, where the 'ServerAddress' and 'Hostname' parameters in prog.cgi are stored in NVRAM and later used by rc to...

PT-2025-46889

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetNetworkSettings' functionality of prog.cgi, where the 'IPAddress' and 'SubnetMask' parameters are directly concatenated into shell commands executed...

DEBIAN-CVE-2025-40182

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

CVE-2025-40182

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

CVE-2025-40182

Technical details for CVE-2025-40182 are not provided in the supplied documents. The initial description mentions a kernel crypto skcipher reqsize handling issue, but no vendor/version specifics or remediation are included here. Monitor for updated advisories.

CVE-2025-40182 crypto: skcipher - Fix reqsize handling

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

EUVD-2025-136962

Malicious code in rusdi-set-rus npm...

EUVD-2025-136958

Malicious code in rusdi-set-rusma npm...

EUVD-2025-141618

Malicious code in rusdi-set-rusmaya npm...

MAL-2025-178362 Malicious code in rusdi-set-rusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b46856c9f895aa1677efb4696fcf066f81fd533a70ec75d0db2eaf502c75d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136956

Malicious code in rusdi-set-rusmay npm...

Malicious code in rusdi-set-nutru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b464272cf8e2bfc3864b0613c1e83aebac54a86f50ec305bdb752804ac5482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-136964

Malicious code in rusdi-set-ru npm...

MAL-2025-173141 Malicious code in budi-set-rusmaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a506d084a14bfc8b02ebcd023ee60598148fe8f295aeec94fd2a10025a594c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...