CVE-2023-53945: Improper Neutralization of Special Elements used in an OS Command

BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP a...

PT-2025-51202

Name of the Vulnerable Software and Affected Versions Shiguangwu sgwbox N3 version 2.0.25 Description A buffer overflow weakness exists in the file /usr/sbin/http eshell server of the WIREDCFGGET Interface component. Manipulation of the params argument can trigger this issue, potentially allowing...

CVE-2025-36751

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint...

CVE-2025-36751 Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint...

Growatt ShineLan-X 安全漏洞

Growatt ShineLan-X is a data logger for a photovoltaic PV inverter from Growatt, a Chinese company. A security vulnerability exists in Growatt ShineLan-X that stems from a lack of encryption in the configuration interface, which could lead to interception and manipulation of communication request...

Vulnerability of the acpi_db_display_objects() function in the drivers/acpi/acpica/dbconvert.c module – The ACPI support driver for the Linux kernel’s core, which allows a hacker to cause system failures.

Vulnerability of the acpidbdisplayobjects function in the drivers/acpi/acpica/dbconvert.c module – The ACPI support driver for the Linux kernel’s processor is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Missing Authentication

Overview Affected versions of this package are vulnerable to Missing Authentication in the xDS interface. An attacker can access sensitive configuration data, including certificate information, backend service details, routing rules, and cluster metadata, by connecting to the exposed port without...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to call acpiputtable to free ACPI memory, which could lead to a memory leak...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A security vulnerability exists in F5 BIG-IP that originates from an undisclosed endpoint accessible via the Configuration...

EUVD-2020-6070

Malware in sbrugna...

EUVD-2003-1417

Malware in sbrugna...

EUVD-2020-19803

Malware in sbrugna...

EUVD-2020-10253

Malware in sbrugna...

EUVD-2020-5400

Malware in sbrugna...

EUVD-2020-10254

Malware in sbrugna...

EUVD-2022-32084

Malicious code in bioql PyPI...

EUVD-2025-20401

Malicious code in bioql PyPI...

EUVD-2024-54122

Malicious code in bioql PyPI...

EUVD-2022-34192

Malicious code in bioql PyPI...

CVE-2022-50389

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmcrb: Add the missed acpiputtable to fix memory leak In crbacpiadd, we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, shou...