CVE-2025-4365 NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read

Arbitrary file read in NetScaler Console and NetScaler SDX SVM...

CVE-2025-4365

The CVE-2025-4365 issue affects NetScaler Console and NetScaler SDX (SVM). It is an authenticated Arbitrary File Read vulnerability in the download API (nitro/v1/download), where input validation does not properly constrain the file path, enabling an admin to read arbitrary files on the system. V...

NetScaler Console and NetScaler SDX (SVM) Security Bulletin for CVE-2025-4365

Severity - Medium Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler SDX SVM . Refer to below for further details: Affected Versions The following supported versions of NetScaler Console are affected: NetScaler Console 14.1 BEFORE...

Citrix NetScaler Console和Citrix NetScaler SDX 安全漏洞

Citrix NetScaler Console and Citrix NetScaler SDX are both products of Citrix Corporation, U.S.A. Citrix NetScaler Console is a cloud-based service that provides a unified, centralized console for managing, monitoring, and troubleshooting the entire NetScaler application delivery...

The vulnerability of the IBM Hardware Management Console, related to improper management of processes, allows a malicious individual to escalate their privileges and execute arbitrary code.

The vulnerability of the IBM Hardware Management Console is related to improper management of processes. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Added a check for the return value of getzeroedpage. Also, added a check for the return value of getzeroedpage in sclpconsoleinit to prevent null pointer dereferencing. Furthermore, to address the memory leak caused by...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: tty: xilinxuartps: split sysrq handling The lockdep tool detected the following circular locking dependencies: CPU 0 | CPU 1 ============= | ============== cdnsuartisr | printk uartportlockport | consolelock cdnsuartconsolewrite ...

CVE-2024-25573

Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing...

CVE-2024-25573 Stored Cross-Site Scripting in Administrative Console Context

Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing...

CVE-2024-25573 Stored Cross-Site Scripting in Administrative Console Context

Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing...

CVE-2024-25573

CVE-2024-25573 describes a Stored Cross-Site Scripting (XSS) vulnerability in the PingFederate Administrative Console, arising from unsanitized user-supplied data that can trigger JavaScript code execution in subsequent user processing. Affected product: PingFederate Administrative Console (Ping ...

PT-2025-25500 · Ping Identity · Pingfederate Administrative Console

Name of the Vulnerable Software and Affected Versions: PingFederate Administrative Console affected versions not specified Description: The issue concerns unsanitized user-supplied data saved in the PingFederate Administrative Console, which could trigger the execution of JavaScript code in...

CVE-2025-49589

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...

Telex Remote Dispatch Console Server和RTS VLink Virtual Matrix Software 安全漏洞

Telex Remote Dispatch Console Server is a scalable communication system from Telex Corporation, U.S.A. RTS VLink Virtual Matrix Software is a software solution for RTS matrix intercom systems from RTS Corporation, U.S.A. The vulnerability is due to a security flaw in Telex Remote Dispatch Console...

Malicious code in console-color-nodejs (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5028 Malicious code in console-color-nodejs (npm)

The package communicates with a domain associated with malicious activity...

UBUNTU-CVE-2025-49589

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...

CVE-2025-49589 PCSX2 Contains a Stack-based Buffer Overflow in IOP Console Logging

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...

CVE-2025-49589

CVE-2025-49589 (PCSX2) affects the PCSX2 PS2 emulator. A stack-based buffer overflow exists in the Kprintf_HLE function in versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow an attacker to execute arbitrary code if IOP Console Logging is enabled (describe...

CVE-2025-49589

PCSX2 is a free and open-source PlayStation 2 PS2 emulator. A stack-based buffer overflow exists in the KprintfHLE function of PCSX2 versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled IOP...