CVE-2025-27053

Memory corruption during PlayReady APP usecase while processing TA commands...

CVE-2025-4615

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI...

Malicious code in vue-analytics-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6264af628cc0d76e732dffe05db10a0bd52bcffaad0549e986349c8fc542cf79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48313 Malicious code in vue-analytics-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6264af628cc0d76e732dffe05db10a0bd52bcffaad0549e986349c8fc542cf79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48312 Malicious code in superbet-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45a9d250491e6e1730c0d00d3f235091fccd078ad4ed75002897332819f9317d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-10239

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes...

CVE-2025-60001

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's...

Malicious code in wt-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2d85a0a81bf32d87da2b57522113cf28e122344c75d7055ea5d5116d63f61e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in supplychain-firewall-benchmark-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19af5203b034f6420f173bf6e45719afeb28ecfe359a8858cbe814fe3cd55d11 The OpenSSF Package Analysis project identified 'supplychain-firewall-benchmark-hello' @ 1.10.2 npm as malicious. It is considered malicious...

MAL-2025-48401 Malicious code in supplychain-firewall-benchmark-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19af5203b034f6420f173bf6e45719afeb28ecfe359a8858cbe814fe3cd55d11 The OpenSSF Package Analysis project identified 'supplychain-firewall-benchmark-hello' @ 1.10.2 npm as malicious. It is considered malicious...

CVE-2025-11188 CVE-2025-11188

The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database...

Incorrect Execution-Assigned Permissions

Overview Affected versions of this package are vulnerable to Incorrect Execution-Assigned Permissions via the process responsible for executing system commands. An attacker can execute arbitrary commands on the server by sending crafted requests after authentication. Remediation A fix was pushed...

CVE-2025-47338

Memory corruption while processing escape commands from userspace...

CVE-2025-21065

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

EUVD-2025-33668

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

CVE-2025-21065

The issue CVE-2025-21065 affects Samsung Retail Mode prior to version 5.59.11. The root cause is improper input validation in Retail Mode, enabling a local attacker to execute privileged commands on their own device. The affected component is Retail Mode (Samsung), with the vulnerability triggere...

CVE-2025-21065

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

CVE-2025-21065

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices...

SAMSUNG Retail Mode 安全漏洞

SAMSUNG Retail Mode is a demo mode application from Samsung South Korea. A security vulnerability exists in SAMSUNG Retail Mode versions prior to 5.59.11, which stems from improper input validation and could allow an attacker to execute privileged commands on an owned device...

PT-2025-41525

Name of the Vulnerable Software and Affected Versions Retail Mode versions prior to 5.59.11 Description A flaw exists in input validation within Retail Mode. This allows a local attacker to execute privileged commands on their own device. Recommendations Update Retail Mode to version 5.59.11 or...