CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

CVE-2025-65231: Improper Neutralization of Input During Web Page Generation

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

PT-2025-49589

Name of the Vulnerable Software and Affected Versions Barix Instreamer versions prior to 04.07 Description The software contains a Cross Site Scripting XSS issue within the Web UI. Specifically, the I/O & Serial configuration page’s CTS close command user-input field is affected. This field store...

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

Barix Instreamer 安全漏洞

Barix Instreamer is an audio encoding device from the Swiss company Barix. A security vulnerability exists in Barix Instreamer v04.06 and earlier versions, which originates from the presence of stored cross-site scripting in the Web UI I/O and Serial Configuration pages...

CVE-2025-65231

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting XSS in the Web UI I/O & Serial configuration page, specifically the CTS close command user-input field which is stored and later rendered on the Status page...

CVE-2025-65231

Barix Instreamer (v04.06 and earlier) is vulnerable to a Cross-Site Scripting (XSS) flaw within its Web UI. The issue resides in the I/O & Serial configuration page , specifically the CTS close command user-input field . This field stores user-provided data which is subsequently rendered on the S...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989185 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if t...

CVE-2025-57685

The LB-Link routers, including the BL-AC2100AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000AE4 v2.4.9, BL-AC1900AZ2 v1.0.2, BL-X26AC8 v1.2.8, and BL-LTE300DA4 V1.2.3 models, are vulnerable to unauthorized command injection. Attackers can exploit this vulnerability by accessing the /goform/setserialcfg...

UBUNTU-CVE-2021-47330

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serialcs: Fix a memory leak in error handling path In the probe function, if the final 'serialconfig' fails, 'info' is leaking. Add a resource handling path to free this memory...