CVE-2026-44100

The CVE-2026-44100 entry concerns the CHARX JupiCore service, described as allowing an unauthenticated remote attacker to reconfigure charging points. According to the sources, this can lead to disclosure of charging point UIDs, Denial-of-Service, and files tampering. The connected documents prov...

IDrive for Windows contains local privilege escalation vulnerability

Overview The IDrive Cloud Backup Client for Windows, versions 7.0.0.63 and earlier, contains a privilege escalation vulnerability that allows any authenticated user to run arbitrary executables with NT AUTHORITY\SYSTEM permissions. Description IDrive is a cloud backup service that allows users to...

CVE-2025-69431

The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the NAS device's slot, and then access the USB drive's directory mounted on the NAS using the Sam...

CVE-2026-0963

The CVE-2026-0963 entry concerns Crafty Controller's File Operations API Endpoint, where an input neutralization flaw allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal. The vulnerability affects the File Operations API Endpoint componen...

MAL-2025-162867 Malicious code in nokire-loklok16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50515c04bd512a225facc37076bca95b9c98b31c12b860c62d0e3df9091a6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101758 Malicious code in dramatic_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572e6a2dc480b821a20279d6ba43f0a1f196de58a4fe16c829f83ea6559a019f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53437 Malicious code in nadia-soto28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6e753d19f801d0110b7183f5f1d494a70a0ccce2ee2dfcae157231564ca79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Hitachi MicroSCADA X SYS600 安全漏洞

Hitachi MicroSCADA X SYS600 is a Hitachi MicroSCADA X SYS600 data acquisition and monitoring control system primarily used in power systems. A security vulnerability exists in Hitachi MicroSCADA X SYS600, which can be exploited by an unauthorized local attacker to cause a denial of service by...