MAL-2025-23285 Malicious code in interstellarmedium-biomimicry-sirius-rimraf (npm)

The package interstellarmedium-biomimicry-sirius-rimraf was found to contain malicious code...

MAL-2025-24348 Malicious code in kaus-bootes-quark-sirius (npm)

The package kaus-bootes-quark-sirius was found to contain malicious code...

MAL-2025-27143 Malicious code in nconf-sirius-dorado-soap (npm)

The package nconf-sirius-dorado-soap was found to contain malicious code...

MAL-2025-33736 Malicious code in speleology-nightwatch-centauri-sirius (npm)

The package speleology-nightwatch-centauri-sirius was found to contain malicious code...

MAL-2025-14785 Malicious code in archaeometry-crust-rate-limiter-sirius (npm)

The package archaeometry-crust-rate-limiter-sirius was found to contain malicious code...

PT-2025-32646 · Siemens · Simatic S7-Plcsim +10

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 through 6.0 SIMATIC S7-PLCSIM version 17 SIMATIC STEP 7 versions 17 through 20 SIMATIC WinCC versions 17 through 20 SIMOCODE ES versions 17 through 20 SIMOTION SCOUT TIA versions 5.4 through 5.7 SINAMICS Startdriv...

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and Siemens SIMATIC S7-PLCSIM V17 are both products of Siemens, Germany.Siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers.Siemens SIMATIC S7-PLCSIM V17 is a PLC program simulation software. PLCSIM V17 is a PLC program...

Siemens多款产品 代码问题漏洞

Siemens SIMATIC STEP and others are products of Siemens, a German company. siemens SIMATIC STEP is a comprehensive engineering tool for configuring and programming SIMATIC controllers. siemens SIMATIC PCS neo is a distributed control system. siemens SIMATIC STEP 7 is a PLC program simulation...

CVE-2024-54678: Deserialization of Untrusted Data

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...

PT-2025-32657 · Siemens · Simatic S7-Plcsim +11

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-PLCSIM versions affected versions not specified SIMATIC STEP 7 versions affected versions not specified SIMATIC WinCC versions affected versions not specified SIMOCODE ES versions affected versions not specified SIMOTION SCOUT TIA...

MAL-2025-6760 Malicious code in sirius-import-article (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in sirius-import-article (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 state during suspension in TUXEDO Sirius Gen1. The commit 9d26d3a8f1b0 states that all PCIe ports are allowed to use D3 state during suspension. When the system is suspended, if the port...

The vulnerability of the PROFINET protocol implementation in the modular safety system SIRIUS 3RK3 and the safety relay software SIRIUS 3SK2 allows a intruder to disclose protected information.

The vulnerability of the PROFINET protocol implementation in the modular safety system SIRIUS 3RK3 and the safety relay software SIRIUS 3SK2 is related to a weak password obfuscation during data transmission. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose t...

The vulnerability of the PROFINET protocol implementation in the modular security system software SIRIUS 3RK3, as well as the security relay software SIRIUS 3SK2, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the PROFINET protocol implementation in the modular security system SIRIUS 3RK3 and the security relay software SIRIUS 3SK2 is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability could allow an intruder to gain unauthorized...

The vulnerability of the PROFINET protocol implementation in the modular safety system SIRIUS 3RK3 and the safety relay software SIRIUS 3SK2 allows a intruder to disclose protected information.

The vulnerability of the PROFINET protocol implementation in the modular safety system SIRIUS 3RK3 and the safety relay software SIRIUS 3SK2 lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an intruder to remotely exploit the syst...

CVE-2025-5437

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2025-5437

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2025-5437 Multilaser Sirius RE016 Password Change cstecgi.cgi improper authentication

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2025-5437

The CVE-2025-5437 vulnerability affects Multilaser Sirius RE016 MLT1.0 in the Password Change Handler component, specifically the file /cgi-bin/cstecgi.cgi. The issue arises from manipulation of an unknown function, causing improper authentication. It can be exploited remotely and exploits have b...