Barco ClickShare Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2016-3152)

Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Barco ClickShare Devices Cross-site Scripting (CVE-2016-3150)

Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...

PT-2025-41342

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-27053 Description A memory corruption issue exists during the processing of Trusted Application TA commands within the PlayReady APP usecase. This can lead to potential system instability or compromise. Approximately 1...

PT-2025-41346

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A memory corruption issue exists when processing escape commands originating from userspace. This can potentially lead to system instability or compromise. Approximately 2000...

PT-2025-41422

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in Juniper Networks Junos Space. This allows an attacker to inject script tags...

Barco ClickShare Devices Weak Password Requirements (CVE-2019-18828)

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account present for access via debug interfaces, which are by default not enabled on production devices of the embedded Linux on the ClickShare Button is using a weak password. This plugin...

CVE-2025-11488 D-Link DIR-852 HNAP1 command injection

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

EUVD-2025-33297

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

USN-7809-1: Linux kernel (Azure, N-Series) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...

USN-7789-2 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

USN-7789-2: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

Malicious code in redirect-nqfhsn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2820bbda7f029c1b12a66e234e3b0896b14a6643e1f76f090854c7cc98ec5c10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-297vpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9517560a65a1c1bbd91a87b0d971d3e19dfd28ae7a73c8e9dbdd842907d362e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-4iyfat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308da4bae6f06eca09a47a9ffea24c1ed5afd9ce25ccb18c266d797c1f29e360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48059 Malicious code in redirect-ht8x82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 296fb84ab1f2fb5c2b017998f89dde441a49c75b2d4e6849c2ae0a1e422470ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ytimeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9277037d47468c0c4478c0d43bebb1980e946cbea70391cae6ad12533f8fe78d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-igk4sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e8b6890f2fb4b7dbd39213b59882e2884b95002a8fd1a067c45872a38dd6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48060 Malicious code in redirect-igk4sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e8b6890f2fb4b7dbd39213b59882e2884b95002a8fd1a067c45872a38dd6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48028 Malicious code in func-analyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acdf906e62052075f99f8b6d12353e90718603e428f036750156e9a47c16b61c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cassandra-driver-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 182b17f76b86dc9388eba3e01e07b1339a102abf6e265996a48913ca7379a6b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...