53163 matches found
CVE-2025-41693
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...
CVE-2025-41693
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...
CVE-2025-2296
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...
MAL-2025-192389 Malicious code in libxmljs2qwerty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e288816b28da06174dcb7d9315fb857fc7daf80f81a57de2fbe1b0a3419895 The package libxmljs2qwerty was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in libxmljs2qwerty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e288816b28da06174dcb7d9315fb857fc7daf80f81a57de2fbe1b0a3419895 The package libxmljs2qwerty was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in libxmlfinal2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac89e3df77030c41a5f9d5ac7a10bf66dad824ef1d013c47d913be27080f190 The package libxmlfinal2 was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-192425 Malicious code in libxmlfinal2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac89e3df77030c41a5f9d5ac7a10bf66dad824ef1d013c47d913be27080f190 The package libxmlfinal2 was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in baidu-oscp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707ecb3311268a4753a44190db82280e80d16015e5474475863a3e1487aa5c0 The package baidu-oscp was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-192424 Malicious code in baidu-oscp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707ecb3311268a4753a44190db82280e80d16015e5474475863a3e1487aa5c0 The package baidu-oscp was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in do-not-install-this-package-001 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 27c17335ba5378258efc5d22274e8104e45a493eec51d60d0adbeb9c4f627714 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
MAL-2025-192387 Malicious code in do-not-install-this-package-001 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 27c17335ba5378258efc5d22274e8104e45a493eec51d60d0adbeb9c4f627714 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
MAL-2025-192381 Malicious code in configurator-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1415a36eca30ec625b99386cebfc5f9538d73854984673a1f6827c6f7db1ddac The package configurator-framework was found to contain malicious code. Source: ghsa-malware...
Malicious code in configurator-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1415a36eca30ec625b99386cebfc5f9538d73854984673a1f6827c6f7db1ddac The package configurator-framework was found to contain malicious code. Source: ghsa-malware...
Malicious code in sketchfab-spinner (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f004e2139080a087917f5cfc654423a3ed60ca232dd8a051955d6af9508b1a8f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-192380 Malicious code in sketchfab-spinner (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f004e2139080a087917f5cfc654423a3ed60ca232dd8a051955d6af9508b1a8f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2025-64052
An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to execute arbitrary system commands...
PHOENIX CONTACT FL SWITCH 安全漏洞
PHOENIX CONTACT FL SWITCH is an industrial grade Ethernet switch from PHOENIX CONTACT, Germany. A security vulnerability exists in PHOENIX CONTACT FL SWITCH versions prior to 3.50, which stems from improper handling of null commands by the webshell and could lead to a denial of service attack...
PT-2025-50271
Name of the Vulnerable Software and Affected Versions MiniDVBLinux version 5.4 Description MiniDVBLinux 5.4 contains a remote code execution issue in the SVDRP protocol. This allows remote attackers to send commands to manipulate TV systems. Specifically, crafted SVDRP commands sent through the...
PT-2025-49812
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...
PT-2025-50247
Name of the Vulnerable Software and Affected Versions Selea Targa IP OCR-ANPR Camera affected versions not specified Description The Selea Targa IP OCR-ANPR Camera has an unauthenticated command injection issue in the utils.php file. This allows remote attackers to execute arbitrary shell command...