CVE-2025-67013: Cross-Site Request Forgery (CSRF)

The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery CSRF protection mechanisms no tokens, no Origin/Referer validation on critical configuration endpoints...

CVE-2025-8045: Use After Free

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from...

CVE-2025-6349: Use After Free

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver...

CVE-2025-2879: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to expose sensitive data.This issue affects...

CVE-2025-51733: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...

CVE-2025-51736: Unrestricted Upload of File with Dangerous Type

File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0...

CVE-2025-51734

Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...

PT-2025-48337

Name of the Vulnerable Software and Affected Versions HCL Technologies Ltd. Unica version 12.0.0 Description A CSV formula injection issue exists in HCL Technologies Ltd. Unica. The issue allows for potential manipulation through crafted CSV files. Recommendations At the moment, there is no...

CVE-2025-51735: Improper Neutralization of Formula Elements in a CSV File

CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0...

CVE-2018-25126: Use of Hard-coded Credentials

Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware used by many white-labeled DVR/NVR/IPC products contains hardcoded API credentials and an OS command injection flaw in its configuration services. The web/API interface accepts HTTP/XML requests authenticated with a fixed vendor...

CVE-2025-0643: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025...

Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117253

Malicious code in ltd-sapphire-cat npm...

EUVD-2025-117254

Malicious code in ltd-blush-mockingbird npm...

Malicious code in ltd_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb4cb07fdc280c3172a47139f39058eca0dda24f22b5fc1657ad23d4d4cf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104065

Malicious code in ltdlampreyz3n npm...

EUVD-2025-96696

Malicious code in ltdpenguinz3n npm...

Malicious code in ltd_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bc99332f3f3df09e91908d3dcd1226631f31a3523d5fe9452a5c88dbbf4f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76367

Malicious code in ltddragon-tool npm...

MAL-2025-105373 Malicious code in ltd_dragon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18171bdf9608a6d0ba14e8f5d7ed9c41ad821f4e0726935ae4bb106379ab9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...