Siemens SIMATIC S7-1500 Authentication Bypass by Spoofing (CVE-2021-22890)

curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived...

PT-2025-46921

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1 Description The software stores NIM private keys used in NIM environments in an insecure manner, making them susceptible to unauthorized access by an attacker employing man-in-the-midd...

EUVD-2025-139073

Malicious code in nuyar-man-buya npm...

EUVD-2025-144531

Malicious code in augis-pomdoui9r-man npm...

EUVD-2025-144450

Malicious code in hereis-man-ta npm...

EUVD-2025-144492

Malicious code in auis-lepaod-man npm...

EUVD-2025-144732

Malicious code in apasih-ledang-man npm...

EUVD-2025-144561

Malicious code in augis-pomdoi9r-man npm...

EUVD-2025-144672

Malicious code in aps-leadang-man npm...

CVE-2025-12942

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...

MAL-2025-159664 Malicious code in mans-man-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d38953e59a9ec064c451347b051da397f15cb06c01bbaf35d9252e5b58bbbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147734

Malicious code in tehnah-codfd-man npm...

EUVD-2025-147844

Malicious code in tehah-man-konatol npm...

Malicious code in mans-man-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d38953e59a9ec064c451347b051da397f15cb06c01bbaf35d9252e5b58bbbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-147845

Malicious code in tehah-man-buta npm...

CVE-2025-40744

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 11. Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks...

CVE-2025-40744

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 11. Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks...

CVE-2025-40744

Summary: CVE-2025-40744 affects Solid Edge SE2025 prior to V225.0 Update 11, where the License Service endpoint fails to properly validate client certificates, enabling a potential man-in-the-middle for unauthenticated attackers. Both Red Hat and PT security sources confirm the issue and the affe...

CVE-2025-40744

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 11. Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks...

EUVD-2025-93461

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...