CVE-2025-65565

CVE-2025-65565 affects the omec-project UPF pfcpiface:2.1.3-dev. After PFCP association, a PFCP Session Establishment Request missing the mandatory F-SEID Information Element can cause the session establishment handler to call IE.FSEID() on a nil pointer, triggering a panic and terminating the UP...

CVE-2025-68259 KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced When re-injecting a soft interrupt from an INT3, INT0, or select INTn instruction, discard the exception and retry the instruction if the code stream is changed...

VulnCheck KEV: CVE-2025-9316

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...

VulnCheck KEV: CVE-2025-11700

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

N-able N-Central Authentication Bypass and XXE Scanner

This module scans for vulnerable N-able N-Central instances affected by CVE-2025-9316 Unauthenticated Session Bypass and CVE-2025-11700 XXE. The module attempts to exploit CVE-2025-9316 by sending a sessionHello SOAP request to the ServerMMS endpoint with various appliance IDs to obtain an...

CVE-2025-64265

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.2...

CVE-2025-11367

The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...

CVE-2025-11366

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

CVE-2025-11700

N-central versions 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure...

CVE-2025-64265

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.2...

CVE-2025-64265 WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.2...

CVE-2025-64265

The CVE-2025-64265 entry describes a Missing Authorization vulnerability in the WordPress Frontend File Manager plugin’s nmedia-user-file-uploader, affecting versions ≤ 23.2. The underlying issue is Incorrectly Configured Access Control Security Levels that allows improper authorization. Several ...

PT-2025-46801

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.2...

EUVD-2025-131915

N-central 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4...

EUVD-2025-131913

N-central 2025.4 is vulnerable to authentication bypass via path traversal...

EUVD-2025-131914

N-central versions 2025.4 are vulnerable to an XML External Entities injection leading to information disclosure...

EUVD-2025-144574

Malicious code in augis-pom9r-n npm...

EUVD-2025-144371

Malicious code in n-mila-ainianu npm...

Malicious code in munir-nautyt-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689d55276275d8494e05a3ef1afd8b74ddfd019eae73b9f0b4ebb39ef594ced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-n-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e3ab4d7b2a9cb8f5025fbc79e1c9d2658f22610b39e5397652d372ea7ddbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...