PT-2025-41378

Name of the Vulnerable Software and Affected Versions Flowmon versions prior to 12.5.5 Description Flowmon network monitoring solutions are affected by an issue that allows an authenticated administrator to execute additional unintended commands within scripts designed for troubleshooting. This...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which can be exploited by an attacker to cause a privileged administrator to bypass system restrictions and execute arbitrary...

CVE-2025-57457

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...

MAL-2025-48092 Malicious code in @aviatrixdev/flight-suit1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f67f0297879682bb09001ab95a186ca13c641603c6a4694b81972b68d8a7b55d The OpenSSF Package Analysis project identified '@aviatrixdev/flight-suit1' @ 1.1.25050 npm as malicious. It is considered malicious because: -...

Malicious code in @aviatrixdev/flight-suit1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f67f0297879682bb09001ab95a186ca13c641603c6a4694b81972b68d8a7b55d The OpenSSF Package Analysis project identified '@aviatrixdev/flight-suit1' @ 1.1.25050 npm as malicious. It is considered malicious because: -...

Malicious code in v0-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823ea0633ff002d303ce7a803d2ae0f945f97a935a6757338babb0a483a2f710 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48086 Malicious code in v0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71d07f2261c23ad9fe0c5b269a07b716f10747239391c989fc1979b322b68b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71d07f2261c23ad9fe0c5b269a07b716f10747239391c989fc1979b322b68b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Palo Alto Networks PAN-OS 10.2.x < 10.2.17 / 11.1.x < 11.1.6-h21 / 11.1.7-10.x < 11.1.10-h7 / 11.2.x < 11.2.8 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.17, 11.1.x prior to 11.1.6-h21, 11.1.7-10.x prior to 11.1.10-h7, or 11.2.x prior to 11.2.8. It is, therefore, affected by a vulnerability. An improper input neutralization vulnerability in the management w...

CVE-2025-53967

Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize...

CVE-2025-53967

Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize...

Linux Distros Unpatched Vulnerability : CVE-2025-59682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract function, used by the startapp...

The vulnerability of the Snapshot/Restore commands of the AdminServer component of the centralized service, which is used for managing configuration information, naming, distributed synchronization, and providing group services via Apache ZooKeeper, allows attackers to execute arbitrary commands.

The vulnerability of the Snapshot/Restore commands of the AdminServer component of the centralized service, which is used to manage configuration information, name resolution, distributed synchronization, and provide group services for Apache ZooKeeper, stems from improper handling of insufficien...

CVE-2025-62186

Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling...

CVE-2025-36569

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...

CVE-2025-36354

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input...

EUVD-2025-32712

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/o...

CVE-2025-3719

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/o...

CVE-2025-3719

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/o...

CVE-2025-3719 Incorrect authorization for CLI in Guardian/CMC before 25.2.0

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/o...