ADSLR B-QE2W401 安全漏洞

The ADSLR B-QE2W401 is a wireless router from China's Flying Fish Star ADSLR. A security vulnerability exists in ADSLR B-QE2W401 version 250814-r037c, which stems from the incorrect operation of the parameter delswifimac in the file /sendorder.cgi, which could lead to command injection...

PT-2025-48547

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method...

PT-2025-48400

Name of the Vulnerable Software and Affected Versions ADSLR B-QE2W401 version 250814-r037c Description A command injection issue exists in ADSLR B-QE2W401 250814-r037c. Manipulation of the del swifimac parameter within the /send order.cgi file can lead to command execution. This attack can be...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which originates from a cross-site request forgery in CkEditorAdminController...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b, which originates from a server-side request forgery in the SimpleAiAdminController chat interface...

CVE-2025-61167

SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opaccss/ajaxselector.php component via the id and datas parameters...

EUVD-2025-143167

Malicious code in budi-memeq-b npm...

EUVD-2025-139405

Malicious code in nuilva-vmiam-b npm...

CVE-2025-32091

Incorrect default permissions in some firmware for the IntelR ArcTM B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

Malicious code in masako-b-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f765ae98ea33e70b51a5a92f6e8c0b6f1292c1671739c78b147ad047ad2df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160141 Malicious code in masako-b-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f765ae98ea33e70b51a5a92f6e8c0b6f1292c1671739c78b147ad047ad2df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146357

Malicious code in verify-tactiva-b npm...

MAL-2025-170455 Malicious code in verify-tactiva-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18dd10afe38eeee503688d156fc5b44122c9e0f58bd246e9bb44658d75f6633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18dd10afe38eeee503688d156fc5b44122c9e0f58bd246e9bb44658d75f6633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

EUVD-2025-93480

Incorrect default permissions in some firmware for the IntelR ArcTM B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2025-32091

Incorrect default permissions in some firmware for the IntelR ArcTM B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2025-32091

CVE-2025-32091 affects Intel Arc B-series GPUs in Ring 1: Device Drivers. The issue is incorrect default permissions in firmware that may allow local privilege escalation by a system software adversary with privileged user access and low attack complexity, requiring no user interaction. Impacts a...

PT-2025-46429

Name of the Vulnerable Software and Affected Versions Intel Arc B-series GPUs affected versions not specified Description A configuration issue with default permissions in some firmware for Intel Arc B-series GPUs within Ring 1 device drivers may allow an attacker to gain elevated privileges. A...

Intel® Graphics Advisory

Summary: Potential security vulnerabilities for some Intel® Graphics software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-32091 Description: Incorrect default...