NI LabVIEW 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW version 2025 Q3 and prior versions that originates from an out-of-bounds read when parsing a corrupted VI file, which could lead to...

PT-2025-52228

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 25.3 Description An out of bounds write issue exists in NI LabVIEW within the RevBL function when processing a damaged VI file. This can lead to information disclosure or arbitrary code execution if an attacker...

PT-2025-52232

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 25.3 Description An out of bounds read issue exists in NI LabVIEW within the LVResFile::RGetMemFileHandle function when processing a damaged VI file. Exploitation of this issue could lead to information disclosure ...

EUVD-2017-11922

Malware in sbrugna...

EUVD-2005-0012

Malware in sbrugna...

EUVD-2019-7574

Malware in sbrugna...

EUVD-2019-5589

Malware in sbrugna...

EUVD-2018-10284

Malware in sbrugna...

Malicious code in soap-instrument-nails (npm)

The package soap-instrument-nails was found to contain malicious code...

MAL-2025-46100 Malicious code in soap-instrument-nails (npm)

The package soap-instrument-nails was found to contain malicious code...

Malicious code in statsd-instrument (npm)

The package statsd-instrument was found to contain malicious code...

MAL-2025-33962 Malicious code in statsd-instrument (npm)

The package statsd-instrument was found to contain malicious code...

MAL-2025-26304 Malicious code in midi-instrument (npm)

The package midi-instrument was found to contain malicious code...

Malicious code in midi-instrument (npm)

The package midi-instrument was found to contain malicious code...

CVE-2025-7849

A memory corruption vulnerability due to improper error handling when a VILinkObj is null exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and...

CVE-2025-7848

A memory corruption vulnerability due to improper input validation in lvpict.cpp exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior...

CVE-2025-2634

Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in fontmgr may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and...

CVE-2019-14381

libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot...

The vulnerability of the interface of Siglent SDS1104X-E digital oscilloscopes’ microprogramming software allows a perpetrator to execute arbitrary code.

The vulnerability of the SCPI interface of Siglent SDS1104X-E digital oscilloscopes lies in the lack of authentication due to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Thermo Fisher Scientific Xcalibur 安全漏洞

Thermo Fisher Scientific Xcalibur is a data acquisition and interpretation software from Thermo Fisher Scientific USA. A security vulnerability exists in Thermo Fisher Scientific Xcalibur versions prior to 4.7 SP1 and Thermo Foundation Instrument Control Software ICSW versions prior to 3.1 SP10,...