Microhard Systems IPn4G 安全漏洞

Microhard Systems IPn4G is a cellular wireless gateway from Microhard Canada. A security vulnerability exists in Microhard Systems IPn4G version 1.1.0, which originates from the presence of a hidden function that can manipulate system processes, potentially resulting in a service interruption...

CVE-2025-58097

CVE-2025-58097 concerns LogStare Collector where the installation directory has incorrect access permissions. The issue allows a non-administrative user to manipulate files in the installation path and execution of arbitrary code with administrative privileges (local attack). The CVSS metrics ind...

Malicious code in teagood-lokika32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a431e7eb6d4a156ef4113032a163af3da2ecccea7457f91f211545f861b2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-asinan48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4487d23314eda574e70277231f6d755aa00f124dd07ce9813cf649d0fc434b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130961 Malicious code in vera-bakwan71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f632249c87c617e6ab4271129fa059b45e9226a62b7bbc74392a0116553a057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f125a08321a08e364ca05b2e2af18aed8544f329fff479750b4bc10bb8f1383a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-40773

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications contains a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request. Successful exploitation...

CVE-2025-40773

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications contains a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request. Successful exploitation...

Siemens SiPass integrated 安全漏洞

Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens, Germany. A security vulnerability exists in Siemens SiPass integrated prior to version V3.0, which stems from improper access control and could allow an attacker to manipulate other users' data...

PT-2025-41885

Name of the Vulnerable Software and Affected Versions SiPass integrated versions prior to 3.0 Description A broken access control issue exists in SiPass integrated server applications. The authorization mechanism does not have enough server-side checks, which allows an attacker to execute a...

EUVD-2021-24646

Malware in sbrugna...

EUVD-2007-5430

Malware in sbrugna...

EUVD-2015-2280

Malware in sbrugna...

EUVD-2021-6709

Malicious code in bioql PyPI...

EUVD-2025-22061

Malicious code in bioql PyPI...

CVE-2025-9971

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...

ROS-20250908-06

A vulnerability in Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK and Oracle Java SE software platform is related to incorrect input data validation in the 2D component of Oracle GraalVM. Oracle Java SE platform is related to incorrect input data validation in...

CVE-2025-31977

CVE-2025-31977 concerns HCL BigFix SM and describes a cryptographic weakness due to weak or outdated encryption algorithms. The documents state that an attacker with network access could decrypt or manipulate encrypted communications under certain conditions. The NVD entry and Red Hat advisory co...

Rockwell Automation FactoryTalk Action Manager

RISK EVALUATION Successful exploitation of this vulnerability could allow a local unauthenticated attacker to listen to communications and manipulate the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

CVE-2025-2297

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to...