CVE-2025-3606 Vestel AC Charger Exposure of Sensitive System Information to an Unauthorized Control Sphere

Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device...

CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on April 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-114-01 Schneider Electric Modicon Controllers ICSA-25-114-02 ALBEDO Telecom Net.Time -...

Vestel AC Charger

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker access to sensitive information, such as credentials which could subsequently enable them to cause a denial of service or partial loss of integrity of the charger. 2. RECOMMENDED PRACTICES CISA reminds...

PT-2025-17848 · Vestel · Vestel Ac Charger

Name of the Vulnerable Software and Affected Versions: Vestel AC Charger version 3.75.0 Description: The issue allows an attacker to access files containing sensitive information, such as credentials, which could be used to further compromise the device. This vulnerability could enable remote...

PT-2025-16380 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V4.0si V16.03.10.20 Description: The issue concerns a Buffer Overflow in the AdvSetMacMtuWan function via the mac2 variable. Recommendations: For Tenda AC10 version V4.0si V16.03.10.20, as a temporary workaround, consider...

CVE-2025-29870

Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information...

Malicious code in ac-async-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c30e40062c879e036cecb106668987fc0ac36f72dbc91dc345436419e79176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3140 Malicious code in ac-async-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c30e40062c879e036cecb106668987fc0ac36f72dbc91dc345436419e79176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3141 Malicious code in ac-localnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baed4fee6d491da54b31c19642059e4763ea8b9bfa42c0e8d9312ca4470016f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ac-localnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baed4fee6d491da54b31c19642059e4763ea8b9bfa42c0e8d9312ca4470016f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of Tenda AC6 router microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of Tenda AC6 router microprogramming software is related to the execution of an operation beyond the buffer boundaries in memory when processing the wpapskcrypto parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

CVE-2025-2655

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-2654

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manageservice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

PYSEC-2025-165

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the...

CVE-2025-2655

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-2655

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-2655 SourceCodester AC Repair and Services System Users.php delete_users sql injection

A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function saveusers/deleteusers of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-2655

SourceCodester AC Repair and Services System 1.0 is affected by CVE-2025-2655. The vulnerability resides in the save_users and delete_users functions in /classes/Users.php, where manipulation of the ID argument yields an SQL injection. The issue allows remote exploitation and, per the public disc...

CVE-2025-2654 SourceCodester AC Repair and Services System manage_service.php sql injection

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manageservice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-2654 SourceCodester AC Repair and Services System manage_service.php sql injection

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manageservice.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely...