The vulnerability of the EPC2 component of the microprogramming software for the industrial digital gas analyzer MEAC300-FNADE4 allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EPC2 component in the Windows microprogramming software of the industrial digital gas analyzer MEAC300-FNADE4 is related to the absence of authentication. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of...

Malicious Package

Overview time-server-analyzer is a malicious package. This package contains malicious code intended to exfiltrate data, and its contents have been removed from the official package manager. Although it appears to be a time-related utility, its main function is to collect system information and se...

Siemens SINEC Traffic Analyzer Multiple Vulnerabilities

SINEC Traffic Analyzer is a network management tool provided by Siemens for network traffic monitoring, performance analysis and troubleshooting. The tool supports the configuration and management of industrial network devices such as SCALANCE and RUGGEDCOM, helping users to optimize network...

Malicious code in analyzer-importer (npm)

The package analyzer-importer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in custom-property-analyzer (npm)

The package custom-property-analyzer was found to contain malicious code...

Malicious code in nr1-browser-analyzer (npm)

The package nr1-browser-analyzer was found to contain malicious code...

Malicious code in threaddump-analyzer (npm)

The package threaddump-analyzer was found to contain malicious code...

MAL-2025-14476 Malicious code in analyzer-importer (npm)

The package analyzer-importer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-36838 Malicious code in threaddump-analyzer (npm)

The package threaddump-analyzer was found to contain malicious code...

MAL-2025-27858 Malicious code in nr1-browser-analyzer (npm)

The package nr1-browser-analyzer was found to contain malicious code...

MAL-2025-17835 Malicious code in custom-property-analyzer (npm)

The package custom-property-analyzer was found to contain malicious code...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-40769

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V3.0. The affected application uses a Content Security Policy that allows unsafe script execution methods. This could allow an attacker to execute unauthorized scripts, potentially leading to cross-site...

CVE-2025-40770

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions. The affected application uses a monitoring interface that is not operating in a strictly passive mode. This could allow an attacker to interact with the interface, leading to man-in-the-middle attacks...

CVE-2025-40766

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V3.0. The affected application runs docker containers without adequate resource and security limitations. This could allow an attacker to perform a denial-of-service DoS attack...

CVE-2025-26398

SolarWinds Database Performance Analyzer was found to contain a hard-coded cryptographic key. If exploited, this vulnerability could lead to a machine-in-the-middle MITM attack against users. This vulnerability requires additional software not installed by default, local access to the server and...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20048

CVE-2025-20048 affects Intel® Trace Analyzer and Collector software (all versions). The vulnerability is an uncontrolled search path that could allow an authenticated, low-privilege user to escalate privileges via local access. Multiple sources (Intel advisory INTEL-SA-01266 and Nessus/NVD refere...

CVE-2025-20048

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...