Malicious code in import-big-runtime-permission-web (npm)

The package import-big-runtime-permission-web was found to contain malicious code...

MAL-2025-23082 Malicious code in import-big-runtime-permission-web (npm)

The package import-big-runtime-permission-web was found to contain malicious code...

MAL-2025-18548 Malicious code in do-wnload-available-36615-big-shiny-cars-skip6-dggtzj (npm)

The package do-wnload-available-36615-big-shiny-cars-skip6-dggtzj was found to contain malicious code...

MAL-2025-20567 Malicious code in final-sigma-warn-emulate-big (npm)

The package final-sigma-warn-emulate-big was found to contain malicious code...

Malicious code in interface-signal-encode-authorize-big (npm)

The package interface-signal-encode-authorize-big was found to contain malicious code...

Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

MAL-2025-37869 Malicious code in unix-visualize-stub-file-big (npm)

The package unix-visualize-stub-file-big was found to contain malicious code...

MAL-2025-15670 Malicious code in big-lambda-report-transpile-beta (npm)

The package big-lambda-report-transpile-beta was found to contain malicious code...

EmpireSoft Empirebak 安全漏洞

EmpireSoft Empirebak Empire Backup King is a software for MySQL big data backup and import from China's EmpireSoft. A security vulnerability exists in EmpireSoft Empirebak that originates in the config.php file that allows execution of arbitrary code...

F5 Networks BIG-IP : BIG-IP APM VPN browser client for macOS vulnerability (K000151782)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000151782 advisory. A missing file integrity check vulnerability exists on the macOS F5 VPN browser client...

F5 Networks BIG-IP : BIG-IP Client SSL profile vulnerability (K000141436)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6 / 17.1.2.2. It is, therefore, affected by a vulnerability as referenced in the K000141436 advisory. When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled a...

PT-2025-37228

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to Generic Segmentation Offload GSO and IPv6 packets with extension headers. Specifically, the kernel incorrectly requests checksum offload fo...

F5 Networks BIG-IP : HTTP/2 vulnerability (K000152001)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.2. It is, therefore, affected by a vulnerability as referenced in the K000152001 advisory. An HTTP/2 implementation flaw allows a denial-of-service DoS that uses malformed HTTP/2...

CVE-2025-52585

When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman ADH ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...

CVE-2025-48500 BIG-IP APM VPN web client for macOS vulnerability

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the ReadOneJNGImage function. An attacker can access data on the heap or cause memory corruption by tricking a user into processing a specially crafted image file. Remediation A fix was pushed into the...

K000152635: Quarterly Security Notification (August 2025)

Security Advisory Description On August 13, 2025, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities to help determine the impact to your F5 devices. You can find the details of each issue in the associated articles. You can watc...

K000152001: HTTP/2 vulnerability CVE-2025-54500

Security Advisory Description An HTTP/2 implementation flaw allows a denial-of-service DoS that uses malformed HTTP/2 control frames to break the maximum concurrent streams limit HTTP/2 MadeYouReset Attack. CVE-2025-54500 Impact This vulnerability allows a remote, unauthenticated attacker to caus...

F5 BIG-IP APM 安全漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A security vulnerability exists in F5 BIG-IP APM that stems from configuring network access without properly handling specific traffic, which...

PT-2025-33003 · F5 · F5 Big-Ip Ltm

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP LTM affected versions not specified Description: When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman ADH ciphers enabled, undisclosed requests can cause...