Bottinelli Informatical Vedo Suite File Inclusion Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A file inclusion vulnerability exists in Bottinelli Informatical Vedo Suite, which stems from an uncleaned readfile function call that can be exploited by an...

Bottinelli Informatical Vedo Suite Server-Side Request Forgery Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. Bottinelli Informatical Vedo Suite suffers from a server-side request forgery vulnerability, which originates from the /apivedo/video/preview endpoint that do...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18820)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...

Microsoft Word Information Disclosure Vulnerability (CNVD-2025-18825)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word, which is caused due to a buffer over-read error. An attacker could exploit the vulnerability to obtain sensitive information...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-18821)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to a type confusion error when opening a specially crafted file. An attacker could exploit this vulnerability to execute...

Microsoft Word Code Execution Vulnerability (CNVD-2025-18826)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. Microsoft Word Code Execution Vulnerability, the vulnerability is caused due to incorrect conversion between number types. An attacker could exploit this vulnerability to execute arbitrary co...

MAL-2025-8977 Malicious code in @malware-test-suite-unsex-beath-spoot/test-mlw3-suite-unsex-beath-spoot (npm)

The package @malware-test-suite-unsex-beath-spoot/test-mlw3-suite-unsex-beath-spoot was found to contain malicious code...

Malicious code in @malware-test-suite-unsex-beath-spoot/test-mlw3-suite-unsex-beath-spoot (npm)

The package @malware-test-suite-unsex-beath-spoot/test-mlw3-suite-unsex-beath-spoot was found to contain malicious code...

Malicious code in suite-level-tags (npm)

The package suite-level-tags was found to contain malicious code...

Malicious code in react-grid-suite (npm)

The package react-grid-suite was found to contain malicious code...

Malicious code in netsuite-suitetalk-wsdl-v2020-1.0 (npm)

The package netsuite-suitetalk-wsdl-v2020-1.0 was found to contain malicious code...

MAL-2025-27846 Malicious code in npm-suite-extras (npm)

The package npm-suite-extras was found to contain malicious code...

Malicious code in netsuite-suitetalk-wsdl-v2019-2.0 (npm)

The package netsuite-suitetalk-wsdl-v2019-2.0 was found to contain malicious code...

MAL-2025-31794 Malicious code in react-grid-suite (npm)

The package react-grid-suite was found to contain malicious code...

MAL-2025-13908 Malicious code in a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy (npm)

The package a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy was found to contain malicious code...

MAL-2025-34169 Malicious code in suite-level-tags (npm)

The package suite-level-tags was found to contain malicious code...

MAL-2025-27321 Malicious code in netsuite-suitetalk-wsdl-v2020-2.0 (npm)

The package netsuite-suitetalk-wsdl-v2020-2.0 was found to contain malicious code...

Malicious code in npm-suite-extras (npm)

The package npm-suite-extras was found to contain malicious code...

Malicious code in a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy (npm)

The package a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy was found to contain malicious code...

CVE-2025-20074

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...