13670 matches found
Dongyoung DM-AP240T/W 访问控制错误漏洞
The Dongyoung DM-AP240T/W is a wireless access point device from Dongyoung Corporation in South Korea. An access control error vulnerability exists in the Dongyoung DM-AP240T/W that originates in the /cgi-bin/syssystemconfig management endpoint to remotely retrieve a compressed configuration...
SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2025:4231-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4231-1 advisory. - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plug...
PT-2025-48191
Name of the Vulnerable Software and Affected Versions Tellion HN-2204AP routers affected versions not specified Description Tellion HN-2204AP routers have an issue where the /cgi-bin/system config file management endpoint allows remote retrieval of a compressed configuration archive without...
SUSE SLES12: libipa_hbac-devel / libipa_hbac0 / libsss_certmap0 / etc (SUSE-SU-2025:4232-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:4232-1 advisory. - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin bsc12518...
Tellion HN-2204AP 访问控制错误漏洞
The Tellion HN-2204AP is a wireless access point device from Tellion. An access control error vulnerability exists in the Tellion HN-2204AP that originates in the /cgi-bin/systemconfigfile management endpoint to remotely retrieve a compressed configuration archive without authentication, which...
PT-2025-48190
Name of the Vulnerable Software and Affected Versions Dongyoung Media DM-AP240T/W affected versions not specified Description Dongyoung Media DM-AP240T/W wireless access points have an issue where the /cgi-bin/sys system config API endpoint allows remote retrieval of a configuration archive witho...
SUSE-SU-2025:4232-1 Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin bsc1251827 Other fixes: - Install file in krb5.conf.d to include sssd krb5 config snippets bsc1244325...
Security update for sssd
This update for sssd fixes the following issues: CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin bsc1251827 Other fixes: Install file in krb5.conf.d to include sssd krb5 config snippets bsc1244325 Patch...
Festo Compact Vision System, Control Block, Controller, and Operator Unit products
RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker accessing devices without authentication or modifying configuration files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...
EUVD-2025-199409
Malicious code in @voiceflow/husky-config npm...
Malicious code in @voiceflow/vite-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e311606ae472f7551604c1c14cbf14f26fab216c76778f69086466466deac60c The package @voiceflow/vite-config was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199367
Malicious code in eslint-config-kinvey-flex-service npm...
Malicious code in @voiceflow/eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4db5527f8a6098b9553e656b50ee1e0fcae45b163917de83299e9e5200ff96f The package @voiceflow/eslint-config was found to contain malicious code. Source: ghsa-malware...
Malicious code in @voiceflow/storybook-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8dad09f9af7bcfdd86347fd6e8c490939feed1f44cb5632ca2098db24ddbe7b The package @voiceflow/storybook-config was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199390
Malicious code in @voiceflow/semantic-release-config npm...
Malicious code in @voiceflow/npm-package-json-lint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb13f449b9f8582e57b2b30103359ccd3efcbde9b172f827a481af246122211 The package @voiceflow/npm-package-json-lint-config was found to contain malicious code. Source: google-open-source-security...
MAL-2025-191384 Malicious code in @voiceflow/vitest-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f61861d4cf96b95713be7af95e0e0480df49eb37236e6e59c838c165584781 The package @voiceflow/vitest-config was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199379
Malicious code in @voiceflow/vite-config npm...
Malicious code in @antstackio/eslint-config-antstack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3b34f284b315d21cd0f6b7ea57e1fc8b908ade13ffde115d3fb1f6727c7d4a The package @antstackio/eslint-config-antstack was found to contain malicious code. Source: google-open-source-security...