31760 matches found
Ubiquiti多款产品 安全漏洞
The Ubiquiti UBB-XG and Ubiquiti UDB-Pro are both wireless bridge devices from Ubiquiti, Inc. A security vulnerability exists in several Ubiquiti products, which stems from a problem with the airMAX wireless protocol that could lead to remote code execution. The following products and versions ar...
MAL-2026-132 Malicious code in create-react-app-lambda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dce198bea6270ee06edafb853bcde3e517778beca89073512ee6d6cf1da2304 The package create-react-app-lambda was found to contain malicious code. Source: ghsa-malware...
MAL-2026-143 Malicious code in rt-text-media-grid-collection (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f688a9034313f7d48c41ada2e48af7bd425c27af69a13fb41f5ba38c5eca66de The package rt-text-media-grid-collection was found to contain malicious code. Source: ghsa-malware...
Malicious code in spark-ar-core-libs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1285c72e9b251b778e8914d717f3408a94460a9f9aca70a65945e4c510c5651f The package spark-ar-core-libs was found to contain malicious code. Source: ghsa-malware...
CVE-2019-25291 INIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability
INIM Electronics Smartliving SmartLAN/G/SI =6.x contains hard-coded credentials in its Linux distribution image that cannot be changed through normal device operations. Attackers can exploit these persistent credentials to log in and gain unauthorized system access across multiple SmartLiving...
CVE-2019-25290 INIM Electronics Smartliving SmartLAN/G/SI <=6.x Unauthenticated SSRF via GetImage
Smartliving SmartLAN/G/SI =6.x contains an unauthenticated server-side request forgery vulnerability in the GetImage functionality through the 'host' parameter. Attackers can exploit the onvif.cgi endpoint by specifying external domains to bypass firewalls and perform network enumeration through...
CVE-2019-25259 Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Cross-Site Request Forgery
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can trick logged-in users into executing unauthorized actions by crafting malicious web pages that...
CVE-2025-1704
ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition...
CVE-2025-1121
Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image...
CVE-2025-1882
A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to improper access control for register interface. The attack needs to be done withi...
CVE-2022-27481
A vulnerability has been identified in SCALANCE W1788-1 M12 All versions V3.0.0, SCALANCE W1788-2 EEC M12 All versions V3.0.0, SCALANCE W1788-2 M12 All versions V3.0.0, SCALANCE W1788-2IA M12 All versions V3.0.0. Affected devices do not properly handle resources of ARP requests. This could allow ...
CVE-1999-0304
mmap function in BSD allows local attackers in the kmem group to modify memory through devices...
CVE-1999-0720
The ptchown command in Linux allows local users to modify TTY terminal devices that belong to other users...
CVE-1999-0703
OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices...
CVE-2019-7271
Nortek Linear eMerge 50P/5000P devices have Default Credentials...
CVE-2019-7279
Optergy Proton/Enterprise devices have Hard-coded Credentials...
CVE-2019-7266
Linear eMerge 50P/5000P devices allow Authentication Bypass...
CVE-2019-7275
Optergy Proton/Enterprise devices allow Open Redirect...
CVE-2019-7632
LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metacharacters in the support/mtusize.php mtusize parameter. The lifesize default password for the cli account may sometimes be used for authentication...