CVE-2025-6519

CVE-2025-6519 overview (confirmed details) : Affects Copeland E3 Site Supervisor firmware versions prior to 2.31F01. The vulnerability stems from a default admin account named “ONEDAY” that uses a daily-generated password which can be predicted. The ONEDAY user cannot be deleted or modified by an...

PT-2025-35562

Name of the Vulnerable Software and Affected Versions: E3 Site Supervisor versions prior to 2.31F01 Description: E3 Site Supervisor firmware contains a default administrator account, ONEDAY, with a daily generated password that is predictable. The ONEDAY user cannot be deleted or modified...

Linux Distros Unpatched Vulnerability : CVE-2020-28638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - askpassword in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non- empty, causing affected users' files to be encrypted wit...

CVE-2024-46484

creationtimestamp| type| source ---|---|--- 2025-08-29 04:54:19+00:00| seen| https://gist.github.com/powalll/682c1b81696888fd692e595598f2ae3e 2025-08-29 21:27:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115114171833588989 2025-08-30 00:34:31+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2019-18823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authentication...

MAL-2025-41333 Malicious code in this-should-be-ignored (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b64896576ac7254afb7e1202835ec4f39b5b64af2cb380a7bf3b172deba75497 The OpenSSF Package Analysis project identified...

CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

Malicious code in be-kanban-eventbase-importer (npm)

The package be-kanban-eventbase-importer was found to contain malicious code...

MAL-2025-15551 Malicious code in be-kanban-eventbase-importer (npm)

The package be-kanban-eventbase-importer was found to contain malicious code...

MAL-2025-7285 Malicious code in @crabas0npm/eos-quo-necessitatibus-delectus (npm)

The package @crabas0npm/eos-quo-necessitatibus-delectus was found to contain malicious code...

MAL-2025-9809 Malicious code in @zalastax/nolb-_be (npm)

The package @zalastax/nolb-be was found to contain malicious code...

PT-2025-32369 · Eg4 · Eg4

Name of the Vulnerable Software and Affected Versions: EG4 affected versions not specified Description: The affected product allows firmware updates to be downloaded from EG4’s website, transferred via USB dongles, or installed through EG4’s Monitoring Center remote, cloud-connected interface or...

CVE-2025-27072

Information disclosure while processing a packet at EAVB BE side with invalid header length...

CVE-2022-50049

In the Linux kernel, the following vulnerability has been resolved: ASoC: DPCM: Don't pick up BE without substream When DPCM tries to add valid BE connections at dpcmaddpaths, it doesn't check whether the picked BE actually supports for the given stream direction. Due to that, when an asymmetric ...

DEBIAN-CVE-2022-50049

In the Linux kernel, the following vulnerability has been resolved: ASoC: DPCM: Don't pick up BE without substream When DPCM tries to add valid BE connections at dpcmaddpaths, it doesn't check whether the picked BE actually supports for the given stream direction. Due to that, when an asymmetric ...

CVE-2022-50049

CVE-2022-50049 affects the Linux kernel ASoC DPCM path: when adding BE connections, the code could pick a BE that does not support the required stream direction, risking a NULL dereference if a BE substream is missing. The patch adds a presence check for the target BE’s substream at dpcm_add_path...

PT-2025-25975 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue occurs when DPCM tries to add valid BE connections without checking if the picked BE supports the given stream directio...

CVE-2025-4053

The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the...

CVE-2025-4053

The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the...

CVE-2025-4053 Unauthorized creation of master key in Mifare Classic Be-Tech cards

The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the...