2720 matches found
CVE-2025-9316
CVE-2025-9316 affects N-able N-Central versions before 2025.4, enabling unauthenticated sessionID generation and potential session hijack. A nuclei template and advisories describe it as an authentication bypass; mitigations cite updating to 2025.4 or later. Some sources also reference combining ...
PT-2025-46665
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central versions before 2025.4 can generate sessionIDs for users without authentication. This allows unauthenticated users to potentially gain access to the system. Recommendations Update...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4, which originates from XML external enti...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4 that stems from path traversal leading t...
PT-2025-46663
Name of the Vulnerable Software and Affected Versions N-central Software Probe versions prior to 2025.4 Description The N-central Software Probe is susceptible to Remote Code Execution through deserialization. No authentication is required for exploitation. Recommendations Update to a version of...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4 that stems from generating session IDs f...
N-able N-central 安全漏洞
N-able N-central is an RMM platform from N-able Canada Inc. provides large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central versions prior to 2025.4 that stems from a deserialization issue...
PT-2025-46662
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central is susceptible to authentication bypass through a path traversal technique. This allows unauthorized access by exploiting a flaw in how the software handles file paths. Recommendations...
PT-2025-46664
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central versions prior to 2025.4 are susceptible to an XML External Entities injection that could lead to information disclosure. This issue allows for the potential exposure of sensitive data...
kernel: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...
Malicious code in efficient_tiger_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351d9695c2593a196c3af78af3a1dc0ada0dbf455eebbe370726227c075e8816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989982)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989982 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check nssids before accessing the ssids In some versions of cfg80211, the ssi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989349)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989349 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: qcom: clk-rcg2: Update logic to calculate D value for RCG The display pixel clock has a...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988968)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988968 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: qcom: clk-rcg2: Update logic to calculate D value for RCG The display pixel clock has a...
CVE-2025-63423
Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store the Administrator password...
Each Italy Wireless Mini Router WIRELESS-N 300M Security Breach
Each Italy Wireless Mini Router WIRELESS-N 300M is a wireless router from Each Italy. A security vulnerability exists in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211, which stems from improper access control of the web management interface and allows an attacker to...
CVE-2025-63423
CVE-2025-63423 concerns the Italy Wireless Mini Router WIRELESS-N 300M, version v28K.MiniRouter.20190211, where the device was found to store the Administrator password. The connected sources consistently reference the same device/product and the credential storage issue, but there are no public ...
CVE-2025-63422
Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request...
CVE-2025-40071
CVE-2025-40071 pertains to the Linux kernel tty n_gsm handling. The issue arises when opening a DLC channel: gsm_queue() processes frames and invokes gsm_dlci_open() → gsm_modem_update(). In basic encoding, gsm_modem_upd_via_msc() could block the input queue waiting for a Modem Status Command (MS...
