CVE-2025-4053

Be-Tech Mifare Classic card systems are affected. The root cause is that data stored on the Mifare Classic cards is in cleartext, enabling an attacker with a guest card to craft a master key card that can unlock all locks in the building. Affected component: Be-Tech Mifare Classic cards and assoc...

Be-Tech Mifare Classic cards 安全漏洞

Be-Tech Mifare Classic cards are a line of electronic cards from Be-Tech. A security vulnerability exists in Be-Tech Mifare Classic cards that stems from the explicit storage of data, which could lead to the creation of master key cards...

PT-2025-22891 · Be Tech · Be-Tech Mifare Classic

Name of the Vulnerable Software and Affected Versions: Be-Tech Mifare Classic card systems affected versions not specified Description: The data stored in the Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a...

CVE-2024-51881

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beautimour Be Shortcodes be-shortcodes allows DOM-Based XSS.This issue affects Be Shortcodes: from n/a through = 1.0.0...

Malicious code in coral-web-be (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed6f9e4fce7203c24af76e6440362a31f735ffb3344096dd9918a2f76bcf4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4327 Malicious code in coral-web-be (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed6f9e4fce7203c24af76e6440362a31f735ffb3344096dd9918a2f76bcf4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Intellian Iridium Certus 700 输入验证错误漏洞

Intellian Iridium Certus 700 is a marine satellite Internet system from Intellian Corporation in South Korea. An input validation error vulnerability exists in the Intellian Iridium Certus 700 that stems from an inconsistent firewall rule ID, which could lead to the creation of rules that cannot ...

CVE-2022-47445

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0...

CVE-2020-11511

The LearnPress plugin before 3.2.6.9 for WordPress allows remote attackers to escalate the privileges of any user to LP Instructor via the accept-to-be-teacher action parameter...

CVE-2006-6843

PHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla! allows remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

be.yildiz-games:module-messaging-activemq (=1.0.15), com.chutneytesting:action-impl (>=2.2.1 <=3.0.0) +53 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.18.0 <=5.18.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.18.0, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.17.0, =0.19.12-2023-11-12, =RC0-0.19.12-2023-10-27, =0.19.12-2023-11-12, =RC0-0.19.12-2023-10-27, =1.2.1.2, =1.2.1.1-beta.1, =0.10.0, =1.1.0, =1.5.0, =1.8.0 and more Source cves: CVE-2025-27533...

H3C多款产品 注入漏洞

H3C Magic NX30 Pro and others are products of China's Xinhua San H3C.H3C Magic NX30 Pro is a home router that supports WiFi6 3000M rate.H3C Magic NX15 is a router.H3C Magic NX400 is a router. An injection vulnerability exists in several H3C products. The vulnerability stems from a command injecti...

Malicious code in react-native-windows-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c894e9ec1df07b7a9631c7a3fff0940b131f370c1e5c3d1846b7ff2398076e59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2022-49581

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix buffer overflow in begetmoduleeeprom becmdreadporttransceiverdata assumes that it is given a buffer that is at least PAGEDATALEN long, or twice that if the module supports SFF 8472. However, this is not always the cas...

UBUNTU-CVE-2024-45779

An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number of extent entries to be read. A crafted or corrupted BFS filesystem may cause an integer overflow during the file reading, leading to a he...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: be2net: fixed a potential memory leak in bexmit. bexmit returns NETDEVTXOK without freeing the skb variable, in case bexmitenqueue fails. To address this issue, add devkfreeskbany to properly handle the situation...

Malicious code in cg-be-package (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-1031 Malicious code in cg-be-package (npm)

The package communicates with a domain associated with malicious activity...

DEBIAN-CVE-2024-56702

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark rawtp arguments with PTRMAYBENULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL. However, in certain cases, a raw tracepoint argument may end up being...

OESA-2024-2570 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on scosocktimeout conn-sk maybe have been unlinked/freed while waiting for scoconnlock so this checks if the conn-sk is still valid by...