PT-2026-1920

Name of the Vulnerable Software and Affected Versions KAYSUS KS-WR1200 version 107 Description KAYSUS KS-WR1200 routers with firmware version 107 expose SSH and TELNET services on the LAN interface with hardcoded root credentials root:12345678. The administrator cannot disable these services or...

CVE-2025-68718: Exposure of Sensitive Information to an Unauthorized Actor

KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN interface with hardcoded root credentials root:12345678. The administrator cannot disable these services or change the hardcoded password. Changing the management GUI password does not affect SSH/TELNET...

CVE-2025-68716

KAYSUS KS-WR3600 routers running firmware version 1.0.5.9.1 are vulnerable to unauthorized access due to the SSH service being enabled by default on the LAN interface. The root account is configured with no password, and the management interface (CLI and web GUI) lacks the ability to disable SSH ...

CVE-2025-68718

KAYSUS KS-WR1200 routers with firmware 107 expose SSH and TELNET services on the LAN interface with hardcoded root credentials root:12345678. The administrator cannot disable these services or change the hardcoded password. Changing the management GUI password does not affect SSH/TELNET...

KAYSUS KS-WR3600 安全漏洞

The KAYSUS KS-WR3600 is a wireless router from the Chinese company KAYSUS. A security vulnerability exists in the KAYSUS KS-WR3600 version 1.0.5.9.1, which stems from improper configuration management and could allow an attacker to download a full configuration archive containing sensitive files...

PT-2026-1921

Name of the Vulnerable Software and Affected Versions KAYSUS KS-WR3600 router version 1.0.5.9.1 Description KAYSUS KS-WR3600 routers with firmware version 1.0.5.9.1 have a configuration management issue. An attacker with an active user session can query the backup endpoint and download a full...

CVE-2025-68718

The KAYSUS KS-WR1200 wireless router is vulnerable in firmware version 107 because it exposes SSH and TELNET services on the LAN interface using hardcoded root credentials (root:12345678 ). Attackers adjacent to the LAN can trivially log in with root privileges. The administrator is unable to dis...

CVE-2025-15435

A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/workupdate.jsp. This manipulation of the argument Report causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. The vend...

CVE-2025-15436 Yonyou KSOA work_edit.jsp sql injection

A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/workedit.jsp. Such manipulation of the argument Report leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may b...

CVE-2025-15425

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/deluser.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit ha...

The vulnerability of the `ks_sa_rng_init()` function in the `drivers/char/hw_random/ks-sa-rng.c` file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the kssarnginit function in the drivers/char/hwrandom/ks-sa-rng.c file of the Linux kernel is related to zero-division errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

SUSE CVE-2025-40127

In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...

Malicious code in sonic-ks-fudiaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f765b984dfe3c6ef52816e23955230a2831402a1ad915d173b1df690ca3d983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-afua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b613a8620d407bead4ca8466e7f733a1aa54fcf46376132f17e26da9b7b85bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c71b313793417f9a31321f5c7476f52ac0189fc1395fdf0c8e70a876cdccc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fudja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe8c4ac11499cbea17147eed24797ffe760edb49fb60360185ffb25d75f9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-fuja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996b469a65fc376f41c23dd2b9185027fef2ac56c29008fc0a33bf7e71094c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ks-ahagafuha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e38efc30314278d212a9d422afd08a0a8afacb71b91965c0d6c25870f2fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185089 Malicious code in sonic-ks-fudja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe8c4ac11499cbea17147eed24797ffe760edb49fb60360185ffb25d75f9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185086 Malicious code in sonic-ks-fudiaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f765b984dfe3c6ef52816e23955230a2831402a1ad915d173b1df690ca3d983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...