Dell SmartFabric OS10 Software 安全漏洞

DELL SmartFabric OS10 Software is a software-defined network operating system from Dell Networks, based on Linux and open source technologies, and is primarily used to enable flexible management and automated deployment of data center network resources. DELL SmartFabric OS10 Software has a...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

Malicious code in vite-lightparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2be62813ca93fa71037568bc538e2ac083ad48faf1e5d0f362c4847d0f8a1b39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-36600

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

Dell Client Platform BIOS 安全漏洞

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS suffers from an Access Control Error vulnerability that stems from improper access control of mirrored or aliased memory regions in an externally developed component, which can be exploited by an...

CVE-2025-22482

A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability in the following version:...

QNAP Qsync Central 格式化字符串错误漏洞

QNAP Qsync Central is a cloud-based file synchronization service on a NAS from Taiwan, China-based QNAP Technology QNAP. A Formatting String Error vulnerability exists in QNAP Qsync Central, which originates from an externally controlled formatting string and could allow a remote attacker to obta...

CVE-2024-50399

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50396

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QT...

CVE-2023-21420

Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution...

Malicious code in sforce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1006bbc6c749967a658f4450e8557dbe5aec05fcc5d4ef9a9d8fba16bbb0ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-2875

CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webserver URL to access resources...

Schneider Electric ConneXium Network Manager 安全漏洞

Schneider Electric ConneXium Network Manager Schneider Electric Cnm is an industrial Ethernet network management software from Schneider Electric France. A security vulnerability exists in Schneider Electric ConneXium Network Manager version V2.0.01, which originates from an externally accessible...

CVE-2025-31421 WordPress Srbtranslatin plugin <= 3.2.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Oblak Studio Srbtranslatin srbtranslatin allows Retrieve Embedded Sensitive Data.This issue affects Srbtranslatin: from n/a through = 3.2.0...

Private Data Structure Returned From A Public Method

Overview Affected versions of this package are vulnerable to Private Data Structure Returned From A Public Method. When a user accesses an externally referenced image, the provider of the image may obtain private information about the IP address of that accessing user. Remediation Upgrade...

CVE-2025-29868 Apache Answer: Using externally referenced images can leak user privacy.

Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of th...

Malicious code in gash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d7e92080b720d7d708537639734002025adb32846e183163eab64fed19c17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in event-handle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80089375c8962bc9b14ecf6eea6f7f669f3235efadc86a11dc4a601ea24b8581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in merchanttoolserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5064980441eee945866b35b80f2f2f2935f077673a4fa8f15c147e7f043c4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bithumb-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486276686eda2f4f675b363605d7e934f7665dfbca8a85f49d8b76a801f7ce43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...