Tenda CH22 安全漏洞

Tenda CH22 is an enterprise-grade wireless router from Tenda brand. The Tenda CH22 suffers from a buffer overflow vulnerability that originates from the parameter sambauserNameSda in file /goform/SetSambaConf that fails to correctly validate the length and size of the input data, which can be...

Linux Distros Unpatched Vulnerability : CVE-2018-6533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Icinga 2.x through 2.8.1. By editing the init.conf file, Icinga 2 can be run as root. Following this the program can be used to run...

CVE-2025-9381

CVE-2025-9381 affects FNKvision Y215 CCTV Camera (firmware 10.194.120.40). The vulnerability involves information disclosure via manipulation of an unknown part of the file /tmp/wpa_supplicant.conf on the device, with physical access required. The issue is described as high attack complexity, but...

CVE-2025-24975 Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External

Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the CryptCallback interface is used when...

Malicious code in @zalastax/nolb-node-red-conf (npm)

The package @zalastax/nolb-node-red-conf was found to contain malicious code...

MAL-2025-12658 Malicious code in @zalastax/nolb-node-red-conf (npm)

The package @zalastax/nolb-node-red-conf was found to contain malicious code...

CVE-2025-8757

The CVE-2025-8757 entry concerns TRENDnet TV-IP110WN (firmware 1.2.2). Affected component: Embedded Boa Web Server, specifically the /server/boa.conf file. Root cause is described as a least-privilege violation in the manipulated configuration, allowing local attackers to exploit the issue. Explo...

SUSE CVE-2025-38445

In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1reshape In the raid1reshape function, newpool is allocated on the stack and assigned to conf-r1biopool. This results in conf-r1biopool.wait.head pointing to a stack address...

PT-2025-32444 · Trendnet +1 · Trendnet Tv-Ip110Wn +1

Name of the Vulnerable Software and Affected Versions: TRENDnet TV-IP110WN version 1.2.2 Description: A vulnerability exists in TRENDnet TV-IP110WN version 1.2.2 related to an unknown functionality of the file /server/boa.conf within the Embedded Boa Web Server component. This issue results in a...

Malicious code in jsonlise-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf082fc7a0245d35242f1e0d04f639029dcca292f35ffa61b5ac38c64550d6eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6245 Malicious code in jsonlise-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf082fc7a0245d35242f1e0d04f639029dcca292f35ffa61b5ac38c64550d6eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-44650

In Netgear R7000 V1.3.1.6410.1.36 and EAX80 V1.0.1.701.0.2, the USERLIMITGLOBAL option is set to 0 in the bftpd.conf configuration file. This can cause DoS attacks when unlimited users are connected...

Malicious code in jsonli-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8776bc06346e1791322c97de75dbe5905bb93e7c671205b1d3fec085ac75db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5927 Malicious code in jsonli-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8776bc06346e1791322c97de75dbe5905bb93e7c671205b1d3fec085ac75db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonlis-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce7376d51c7762ca92d6e8e883d0149c250a44d92fcdea76667d07c5b584dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5928 Malicious code in jsonlis-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce7376d51c7762ca92d6e8e883d0149c250a44d92fcdea76667d07c5b584dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FNKvision FNK-GU2 安全漏洞

FNKvision FNK-GU2 is a camera from FNKvision Thailand. A security vulnerability exists in FNKvision FNK-GU2 version 40.1.7 and earlier, which originates from the /rom/wpasupplicant.conf file storing sensitive information in clear text...

CVE-2025-7116

A vulnerability classified as critical has been found in UTT 进取 750W up to 3.2.2-191225. This affects an unknown part of the file /goform/Fastwirelessconf. The manipulation of the argument ssid leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclose...

Malicious code in stylelint-recommended-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7140ae1a4cb350ca4bafc3879dbea50e300d52d841b5334bcb2f297713a4cc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5520 Malicious code in stylelint-recommended-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7140ae1a4cb350ca4bafc3879dbea50e300d52d841b5334bcb2f297713a4cc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...