Rockwell Automation FactoryTalk ViewPoint 安全漏洞

Rockwell Automation FactoryTalk ViewPoint is a web-based client application from Rockwell Automation, Inc. A security vulnerability exists in Rockwell Automation FactoryTalk ViewPoint that originates from an unauthenticated attacker who can execute an XXE attack using a specially crafted SOAP...

PT-2025-41968

Name of the Vulnerable Software and Affected Versions Home Assistant versions 2025.1.0 through 2025.10.1 Description Home Assistant is home automation software that prioritizes local control and privacy. The energy dashboard is susceptible to stored cross-site scripting. An authenticated user can...

PT-2026-28467

Name of the Vulnerable Software and Affected Versions Home Assistant versions 2025.02 through 2026.01 Description The "remaining charge time" sensor for mobile phones imported from Android Auto in Home Assistant is susceptible to cross-site scripting XSS. This issue is similar to CVE-2025-62172...

PT-2025-41915

Name of the Vulnerable Software and Affected Versions FactoryTalk ViewPoint affected versions not specified Description A security issue exists in FactoryTalk ViewPoint that allows unauthenticated attackers to achieve XML External Entity XXE attacks. Specific SOAP requests can be exploited to...

XML External Entity (XXE)

langchaincommunity is vulnerable to XML External Entity XXE. The vulnerability is due to insecure XML parsing in the EverNoteLoader component that uses etree.iterparse without disabling external entity references, which allows an attacker to craft a malicious XML payload to access sensitive local...

Malicious code in scr-cloud-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c714f60369d28f727a675effd525b4208077e225e46026b537d7606d48708a9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48336 Malicious code in mad-1.2.8.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f458f275324cf68bed67b3ae284456b3688dfd9634450c5a03f39552352ea625 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the parsing of the If-Match and If-None-Match headers when the ETag method is used in response construction. An attacker can cause excessive resource consumption by sending specially crafted...

MAL-2025-48303 Malicious code in react-toast-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d97a357fa8e584e4b5afe4a19068c7294cec8af76786077c6064e611d1aa185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @evo-tech/backoffice-test-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931d6e176eaebf4b172dba6fd81800d7257f741ffad464c014dc9fcd085bcba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.4.0.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8146c0e8e6a0aa9d6e7f8a6375cdbe84b7980976f86b1055aed3e84a19dcace7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.0.2.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a417a96fb1a489ed21a97883097356cc05d7f014eee21d941bc0cf6a4541c036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48222 Malicious code in redirect-ubp4cs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b184e6cfeb122b4bd7211f4d39a3b49f6900d58423cb5824a863fc2cf9b514c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-o92d2h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77f3c6a2ba50a265c6c612f8d9982534cea0e6b9441dec88bd1a7f428adfa8af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48152 Malicious code in redirect-e19jye (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a6122a3af15da86678978370ddd69e455fa6bf90a36c33791a482a7c003d106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-63cl4f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2812550ae381a965b1d3d0268c751c60bc5208a0bffd135bdef63456849476e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48159 Malicious code in redirect-fd91u6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3cdfdea3a7366fe091b0b276a32e9cfcbf518b624842338e9d5befc6c1fb843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48145 Malicious code in redirect-cn040w (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25a017e32cbceb0365c659a0fc3f0649a71d0b52774c3d8002bcc808baa4d086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-eeu53f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb93c87377f42581a57a298338e41779e5304e75b3e6418d51a15341a6f55c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-sormfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5077214a1a7b6d8085d3e85f9e33151aa5ec8c2525c22648b00fa637e46bde67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...