EUVD-2025-199669

Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform in mainok.php user supplied data/hour/time is passed directl...

CVE-2025-66259

Authenticated RCE vulnerability in DB Electronica Mozart FM Transmitter family (versions 30–7000) due to improper input filtering in main_ok.php where user-supplied hour/time data is passed directly to a date shell command. Root cause: insufficient input validation allowing remote code execution ...

CVE-2025-66019

pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This issue has been patch...

PT-2025-48113

Name of the Vulnerable Software and Affected Versions DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30 through 7000 Description The software contains a flaw that allows for remote code execution. An attacker with authentication can execute code due to insufficient input...

DB Electronica Mozart FM Transmitter 安全漏洞

The DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from the Italian company DB Electronica. A security vulnerability exists in DB Electronica Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, and 7000, which originates...

CVE-2025-62703

creationtimestamp| type| source ---|---|--- 2025-11-25 23:23:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6iicdw44h2n...

CVE-2025-64063

creationtimestamp| type| source ---|---|--- 2025-11-25 21:50:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6id52itdb2s...

CVE-2025-34350

creationtimestamp| type| source ---|---|--- 2025-11-25 21:47:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6icx4kzah2q...

CVE-2017-5983

creationtimestamp| type| source ---|---|--- 2025-11-25 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6iagpmcwh2a...

GHSA-9F46-W24H-69W4

creationtimestamp| type| source ---|---|--- 2025-11-25 14:40:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115610852261225855...

CVE-2025-64126

creationtimestamp| type| source ---|---|--- 2025-11-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03 2026-01-09 14:14:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115865555268914985...

CVE-2025-13084

creationtimestamp| type| source ---|---|--- 2025-11-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-04 2025-11-26 21:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kr7cngi32x...

CVE-2025-12003

creationtimestamp| type| source ---|---|--- 2025-11-25 09:28:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gznug73x2n 2025-11-27 18:57:29+00:00| seen| https://t.me/notlukatsky/7751 2025-11-28 07:46:12+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3m6ofchywas2l...

CVE-2025-12525

creationtimestamp| type| source ---|---|--- 2025-11-25 09:14:36+00:00| seen| https://gist.github.com/Darkcrai86/f51a4ee7dab7eb5a1c2d552c9c4cab60...

CVE-2025-64730

creationtimestamp| type| source ---|---|--- 2025-11-25 08:21:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gvvw66fw2s...

libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

AlmaLinux 10 : libsoup3 (ALSA-2025:21032)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21032 advisory. libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTT...

RHEL 8 : libsoup (RHSA-2025:22013)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22013 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Integer Overflow in Cookie Expiration Da...

MAL-2025-190995 Malicious code in react-native-datepicker-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86014f2b55c2d58c217fd51ebbffc71cbc86fad9b13d443647f1cb11c19c7ade The package react-native-datepicker-modal was found to contain malicious code. Source: ghsa-malware...