Malicious code in ic-model-admin (npm)

The package ic-model-admin was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_material-ic (npm)

The package @zalastax/nolb-hyperfunmaterial-ic was found to contain malicious code...

MAL-2025-22882 Malicious code in ic-model-admin (npm)

The package ic-model-admin was found to contain malicious code...

Malicious code in ic-tools-mailer (npm)

The package ic-tools-mailer was found to contain malicious code...

MAL-2025-22883 Malicious code in ic-tools-mailer (npm)

The package ic-tools-mailer was found to contain malicious code...

The vulnerability of the arguments hdr_len/txbuf_len of the qcom-pmic component in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the hdrlen/txbuflen arguments of the qcom-pmic component in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-30312

The Trend Controls IC protocol through 2022-05-06 allows Cleartext Transmission of Sensitive Information. According to FSCT-2022-0050, there is a Trend Controls Inter-Controller IC protocol cleartext transmission of credentials issue. The affected components are characterized as: Inter-Controller...

CVE-2021-21906

Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is used at various locations. The Garrett iC Module exposes an authenticated CLI over TCP port 6877. This interface is used by a secondary GUI client, called “CMA...

CVE-2021-21905

Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is used at various locations. The Garrett iC Module exposes an authenticated CLI over TCP port 6877. This interface is used by a secondary GUI client, called “CMA...

CVE-2021-24875

The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-21901

A stack-based buffer overflow vulnerability exists in the CMA checkudpcrc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this...

CVE-2021-21903

A stack-based buffer overflow vulnerability exists in the CMA checkudpcrc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to strcpy. An attacker can send a malicious packet to trigger this...

CVE-2020-11833

In /SM8250QMaster/android/vendor/oppocharger/oppo/chargeric/oppomp2650.c, the function mp2650datalogwrite in mp2650datalogwrite does not check the parameter len which causes a vulnerability...

[SECURITY] Fedora 41 Update: kappanhang-0-0.3.20250427gitdffb773.fc41

Remotely open audio channels and a serial port to an Icom RS-BA1 server for ex. Icom IC-705 transceiver...

CVE-2023-53082

In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix the crash in hot unplug with vpvdpa While unplugging the vpvdpa device, it triggers a kernel panic The root cause is: vdpamgmtdevunregister will accesses modern devices which will cause a use after free. So need to...

CVE-2025-3179: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected is an unknown function of the file /doctor/deletepatient.php. The manipulation of the argument ic leads to sql injection. It is possible to launch the attack remotely. The...

The vulnerability of Edimax IC-7100 IP cameras’ microprogramming software lies in the lack of measures to neutralize special elements used in the operating system’s command set. This allows intruders to execute arbitrary code.

The vulnerability of the microprogrammed IP camera Edimax IC-7100 is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted...

VulnCheck KEV: CVE-2025-1316

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...

CVE-2025-1316

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...

CVE-2025-1316

Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...