359 matches found
PT-2025-53366
Name of the Vulnerable Software and Affected Versions Microhard Systems IPn4G version 1.1.0 Description An issue exists in Microhard Systems IPn4G that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes...
CVE-2025-42878
SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production. If enabled, unauthenticated attackers could exploit them to access diagnostics, send crafted requests, or disrupt services. This vulnerability has a high impact on confidentiality, availability...
CVE-2025-40820
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only ...
PT-2025-47126
Name of the Vulnerable Software and Affected Versions EasyFlow GP affected versions not specified Description EasyFlow GP developed by Digiwin has a denial of service issue. Unauthenticated remote attackers can send specific requests to cause a denial of the web service. Recommendations At the...
Malicious code in anaisi-pafnolai-asigoga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538e9f879bd28c0f5053c3db959b14be9dda0c0e9a0e2a5a666a6437799dee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nadia-nasicampur18-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a908b830e32c3ca5be306fa42002fdb87b607a3e3d45cc85dbda7e0fde97bf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-109815 Malicious code in tragic_tahr-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9401607d3134607ec47f0b7447958ba983f7032974aa6f17d77d2ca07a43582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-105430 Malicious code in lutfi-tek55-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0837a598b62e411c0596fb047ff074af8d73e72b9bddcc9bfa69e243603dfbe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in okta-mieayam23-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88fa169fa08f1de4624b7e0e7654e309e5fc8f15db2d568aade9a1a15306f18f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-55094 Malicious code in ade-tempe45-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9513c3a1de91580fdcfd529e71b5e2261bcc61e7b5a32d97e48e2daa00b29e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...
CVE-2025-53410
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...
CVE-2025-59461 API does not require authentication
A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services...
CVE-2025-55247
A flaw was found in MSBuild’s temporary directory handling on Linux where predictable, non-randomized temporary paths are used. Local users can create or manipulate those paths before MSBuild runs, causing build failures or unexpected behavior and resulting in denial of service for build...
F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability (K000148512)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2 / 17.5.0. It is, therefore, affected by a vulnerability as referenced in the K000148512 advisory. When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery SSRF protection or when a...
iputils: iputils integer overflow
An integer overflow flaw has been discovered in the ping function within the iputils package. This overflow may allow an attacker to craft an ECHO reply which can prevent iputils from operating normally...
EUVD-2016-9811
Malware in sbrugna...